Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

71.836 exploits

GitHub PoC

CVE-2026-0300 PAN-OS 12.1, 11.2, 11.1, 10.2

CVE-2026-0300CRITICALsob ataque21 mai 2026

PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

90RISCO

abrir ↗

Exploit-DB

Cockpit 359 - RCE

CVE-2026-4631CRITICAL21 mai 2026

Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

68RISCO

abrir ↗

GitHub PoC

CVE-2026-31431-CopyFail---Minified-LPE-PoC

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC

Vulnerability Case Study: CVE-2026-33829 (Windows Snipping Tool NTLM Coercion)

CVE-2026-33829MEDIUM21 mai 2026

Windows Snipping Tool Spoofing Vulnerability

33RISCO

abrir ↗

GitHub PoC

yangh-beep/CVE-2026-31431-C

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC★ 1

Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload → RCE

CVE-2026-4885CRITICAL21 mai 2026

Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload

48RISCO

abrir ↗

GitHub PoC★ 3

0xFuffM3/CVE-2026-31635-DirtyDecrypt

CVE-2026-31635HIGH21 mai 2026

rxrpc: fix oversized RESPONSE authenticator length check

41RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC★ 4

PoC for CVE-2024-6678

CVE-2024-6678CRITICAL21 mai 2026

Authentication Bypass by Spoofing in GitLab

48RISCO

abrir ↗

GitHub PoC

CVE-2026-45829

CVE-2026-45829CRITICAL21 mai 2026

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an un

53RISCO

abrir ↗

GitHub PoC★ 5

CVE-2026-5118 | Divi Form Builder <= 5.1.2 | Unauthenticated Privilege Escalation via Role Injection

CVE-2026-5118CRITICAL21 mai 2026

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

48RISCO

abrir ↗

GitHub PoC

CVE-2026-5118-exp_wordpress_Divi Form Builder

CVE-2026-5118CRITICAL21 mai 2026

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

48RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-9082 | SA-CORE-2026-004

CVE-2026-9082CRITICALsob ataque21 mai 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

100RISCO

abrir ↗

GitHub PoC

cve poc

CVE-2026-9082CRITICALsob ataque21 mai 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

100RISCO

abrir ↗

GitHub PoC★ 1

Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes `autofstx.exe` from the offline WinRE image's `BootExecute` value and refreshes WinRE registration so BitLocker trust is reestablished.

CVE-2026-45585MEDIUM21 mai 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

abrir ↗

GitHub PoC

Scanner para identificação de servidores com softwares SSH possivelmente vulnerável às CVEs CVE-2024-6387 e CVE-2023-48795.

CVE-2024-6387HIGH21 mai 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-41773HIGHsob ataqueransomware21 mai 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

A Go implementation of dirtydecrypt (CVE-2026-31635)

CVE-2026-31635HIGH21 mai 2026

rxrpc: fix oversized RESPONSE authenticator length check

41RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-9082CRITICALsob ataque21 mai 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-9082CRITICALsob ataque21 mai 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

100RISCO

abrir ↗

Exploit-DB

FUXA 1.2.9 - RCE

CVE-2026-25895CRITICAL21 mai 2026

FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

48RISCO

abrir ↗

GitHub PoC★ 1

More portable POC of copyfail LPE (CVE-2026-31431) that works on Alpine Linux

CVE-2026-31431HIGHsob ataque21 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC★ 22

CVE-2026-45250 - FreeBSD 14.x LPE

CVE-2026-45250HIGH21 mai 2026

Stack buffer overflow via setcred(2)

41RISCO

abrir ↗

GitHub PoC

Synthetic demo target for EXPOSURE — CVE-2018-21268 (traceroute) + CVE-2018-3757 (pdf-image)

CVE-2018-21268CRITICAL21 mai 2026

The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host para

48RISCO

abrir ↗

GitHub PoC

「🪶」PoC (Proof of concept) of Path traversal + RCE in Apache HTTP Server 2.4.49

CVE-2021-41773HIGHsob ataqueransomware21 mai 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-2587 PoC validator for Eclipse GlassFish EL Injection RCE in the admin console gadget.jsf handler. Safe authenticated vulnerability scanner for authorized testing.

CVE-2026-2587CRITICAL20 mai 2026

A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used

48RISCO

abrir ↗

GitHub PoC

yusufdalbudak/CVE-2026-42945

CVE-2026-42945CRITICAL20 mai 2026

NGINX ngx_http_rewrite_module vulnerability

60RISCO

abrir ↗

VulnCheck XDB

local

CVE-2021-4034HIGHsob ataque20 mai 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2021-4034HIGHsob ataque20 mai 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.