Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.814exploits catalogados

32.125CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.248VulnCheck XDB 8.150Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

71.760 exploits

GitHub PoC

Divi Form Builder <= 5.1.2 — Unauthenticated Privilege Escalation via Role Injection

CVE-2026-5118CRITICAL22 mai 2026

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

48RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2024-53677CRITICAL22 mai 2026

Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks

70RISCO

abrir ↗

GitHub PoC

BastianXploited/CVE-2026-8181

CVE-2026-8181CRITICAL22 mai 2026

Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

68RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-43494

CVE-2026-43494HIGH22 mai 2026

net/rds: reset op_nents when zerocopy page pin fails

41RISCO

abrir ↗

GitHub PoC

felisha-elmer/Sandbox-Challenge-Spring4Shell-CVE-2022-22965-

CVE-2022-22965CRITICALsob ataque22 mai 2026

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

GitHub PoC★ 3

eprocess offset puller for relevant member offsets and function addresses for cve-2026-40369

CVE-2026-40369HIGH22 mai 2026

Windows Kernel Elevation of Privilege Vulnerability

41RISCO

abrir ↗

GitHub PoC

This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by using any incorrect password in a Basic Authentication header. Attackers could abuse this flaw to create a new administrator account without prior authentication.

CVE-2026-8181CRITICAL22 mai 2026

Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

68RISCO

abrir ↗

GitHub PoC

r3nsi15/CVE-2026-33017-langflow-rce

CVE-2026-33017CRITICALsob ataque22 mai 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISCO

abrir ↗

GitHub PoC

NullByte8080/CVE-2026-36228

CVE-2026-36228HIGH22 mai 2026

Buffer Overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execu

41RISCO

abrir ↗

GitHub PoC

CVE-2024-6387 POC (Currently being edited)

CVE-2024-6387HIGH22 mai 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RISCO

abrir ↗

GitHub PoC

CVE-2026-34926

CVE-2026-34926MEDIUMsob ataque22 mai 2026

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker t

68RISCO

abrir ↗

GitHub PoC

The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass

CVE-2026-8181CRITICAL22 mai 2026

Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

68RISCO

abrir ↗

GitHub PoC

Critical WIC bug (9.8): uninitialized JPEG encode pointers in WindowsCodecs.dll — triggers on 12/16-bit re-encode, not casual preview.

CVE-2025-50165CRITICAL22 mai 2026

Windows Graphics Component Remote Code Execution Vulnerability

48RISCO

abrir ↗

GitHub PoC

NullByte8080/CVE-2026-36227

CVE-2026-36227MEDIUM22 mai 2026

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and e

33RISCO

abrir ↗

GitHub PoC

NullByte8080/CVE-2026-36226

CVE-2026-36226MEDIUM22 mai 2026

Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensit

33RISCO

abrir ↗

Exploit-DB

FUXA 1.2.9 - RCE

CVE-2026-25895CRITICAL21 mai 2026

FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

48RISCO

abrir ↗

GitHub PoC

CVE-2026-5118 – Python2 mass exploit for Divi WordPress plugin Unauthenticated administrator registration via admin-ajax.php. Multi‑threaded scanner with nonce extraction.

CVE-2026-5118CRITICAL21 mai 2026

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

48RISCO

abrir ↗

GitHub PoC

CVE-2026-0300 PAN-OS 12.1, 11.2, 11.1, 10.2

CVE-2026-0300CRITICALsob ataque21 mai 2026

PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

90RISCO

abrir ↗

GitHub PoC

Scanner para identificação de servidores com softwares SSH possivelmente vulnerável às CVEs CVE-2024-6387 e CVE-2023-48795.

CVE-2024-6387HIGH21 mai 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RISCO

abrir ↗

GitHub PoC

「🪶」PoC (Proof of concept) of Path traversal + RCE in Apache HTTP Server 2.4.49

CVE-2021-41773HIGHsob ataqueransomware21 mai 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

CVE-2026-5118-exp_wordpress_Divi Form Builder

CVE-2026-5118CRITICAL21 mai 2026

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

48RISCO

abrir ↗

GitHub PoC★ 3

0xFuffM3/CVE-2026-31635-DirtyDecrypt

CVE-2026-31635HIGH21 mai 2026

rxrpc: fix oversized RESPONSE authenticator length check

41RISCO

abrir ↗

GitHub PoC★ 5

CVE-2026-5118 | Divi Form Builder <= 5.1.2 | Unauthenticated Privilege Escalation via Role Injection

CVE-2026-5118CRITICAL21 mai 2026

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

48RISCO

abrir ↗

GitHub PoC★ 22

CVE-2026-45250 - FreeBSD 14.x LPE

CVE-2026-45250HIGH21 mai 2026

Stack buffer overflow via setcred(2)

41RISCO

abrir ↗

GitHub PoC

EXPOSURE demo target: Tomcat (CVE-2016-0714) + Apache Rave (CVE-2013-1814) + Java filter-padding deps

CVE-2013-1814—21 mai 2026

The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain s

60RISCO

abrir ↗

GitHub PoC★ 1

More portable POC of copyfail LPE (CVE-2026-31431) that works on Alpine Linux

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC★ 1

Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes `autofstx.exe` from the offline WinRE image's `BootExecute` value and refreshes WinRE registration so BitLocker trust is reestablished.

CVE-2026-45585MEDIUM21 mai 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.