Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

71.836 exploits

GitHub PoC

CVE-2024-4367–PDF.js-xss

CVE-2024-4367MEDIUM20 mai 2026

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RISCO

abrir ↗

GitHub PoC

hyperchk/CVE-2025-24071-POC

CVE-2025-24071MEDIUM20 mai 2026

Microsoft Windows File Explorer Spoofing Vulnerability

38RISCO

abrir ↗

GitHub PoC

julianertle/CVE-2023-0386-CTF

CVE-2023-0386HIGHsob ataque20 mai 2026

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISCO

abrir ↗

GitHub PoC★ 1

VULNERAVEL CVE-2018-14847 - CREDENCIAIS EXTRAIDAS MIKROTIK EM PYTHON

CVE-2018-14847CRITICALsob ataque20 mai 2026

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated

100RISCO

abrir ↗

GitHub PoC

Writeup da sala Blue do TryHackMe — exploração do EternalBlue (MS17-010/CVE-2017-0143).

CVE-2017-0143HIGHsob ataqueransomware19 mai 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

GitHub PoC

PwnKit (CVE-2021-4034) Safe Checker This tool performs read-only checks and does not attempt exploitation.

CVE-2021-4034HIGHsob ataque19 mai 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC

SMB Red Team Lab— NTLM Relay via LLMNR Poisoning, CVE-2007-2447, NTLMv2 Hash Cracking & NT AUTHORITY\SYSTEM on Windows 10

CVE-2007-2447—19 mai 2026

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISCO

abrir ↗

GitHub PoC

Exploit code for CVE-2026-42096 and CVE-2026-42097 allowing for arbitrary SQL command execution without authentication.

CVE-2026-42096HIGH19 mai 2026

Broken Access Control in Sparx Pro Cloud Server

41RISCO

abrir ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-35030CRITICAL19 mai 2026

LiteLLM has an authentication bypass via OIDC userinfo cache key collision

48RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-55182CRITICALsob ataqueransomware19 mai 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

abrir ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-40217HIGH19 mai 2026

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/t

41RISCO

abrir ↗

VulnCheck XDB

denial-of-service

CVE-2026-42945CRITICAL19 mai 2026

NGINX ngx_http_rewrite_module vulnerability

60RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-42945CRITICAL19 mai 2026

NGINX ngx_http_rewrite_module vulnerability

60RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2024-36420HIGH19 mai 2026

GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file

56RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-34474: unauthenticated ETHCheat=1 requests leak the admin password and Wi-Fi PSK from ZTE H298A/H108N routers.

CVE-2026-34474HIGH19 mai 2026

Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. A crafted request to

46RISCO

abrir ↗

GitHub PoC★ 5

CVE-2026-31635

CVE-2026-31635HIGH19 mai 2026

rxrpc: fix oversized RESPONSE authenticator length check

41RISCO

abrir ↗

GitHub PoC

The code for personally reproducing the corresponding vulnerability

CVE-2026-35029HIGH19 mai 2026

LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

61RISCO

abrir ↗

GitHub PoC

CVE-2026-30691: Stored Cross-Site Scripting (XSS) in @cyntler/react-doc-viewer

CVE-2026-30691MEDIUM19 mai 2026

Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitra

33RISCO

abrir ↗

GitHub PoC

imSre9/CVE-2026-42945

CVE-2026-42945CRITICAL19 mai 2026

NGINX ngx_http_rewrite_module vulnerability

60RISCO

abrir ↗

GitHub PoC★ 1

RedCrazyGhost/CVE-2026-42945

CVE-2026-42945CRITICAL19 mai 2026

NGINX ngx_http_rewrite_module vulnerability

60RISCO

abrir ↗

GitHub PoC

NGINX CVE-2026-42945 一键修复脚本

CVE-2026-42945CRITICAL19 mai 2026

NGINX ngx_http_rewrite_module vulnerability

60RISCO

abrir ↗

VulnCheck XDB

local

CVE-2024-37032HIGH19 mai 2026

Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path,

78RISCO

abrir ↗

GitHub PoC

Maxime288/CVE-2026-8838-RCE

CVE-2026-8838CRITICAL19 mai 2026

Remote Code Execution via eval() Injection in amazon-redshift-python-driver

48RISCO

abrir ↗

GitHub PoC★ 1

POC_CVE-2026-45185 for nuclei-templates

CVE-2026-45185CRITICAL19 mai 2026

Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing p

48RISCO

abrir ↗

GitHub PoC

Shell scanner for CVE-2026-31431 "Copy Fail" — a local privilege escalation via Linux kernel page cache corruption (algif_aead/AF_ALG). Checks kernel version, patch status, module state, setuid exposure and mitigations. Supports Debian 11–13 and Ubuntu 20.04–25.10. CI/CD-ready (exit codes + JSON output).

CVE-2026-31431HIGHsob ataque19 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-43284HIGH19 mai 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

GitHub PoC

anonmrc/CVE-2026-34486-e-Tomcat-Tribes

CVE-2026-34486HIGH19 mai 2026

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

61RISCO

abrir ↗

GitHub PoC★ 1

Dirty Frag - kernel Linux critical Vulnerability

CVE-2026-43284HIGH19 mai 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

GitHub PoC★ 1

A report on Dirty Frag, which is a Linux Local Privilege Escalation (LPE) vulnerability chain that allows an unprivileged user to gain root access

CVE-2026-43284HIGH19 mai 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

GitHub PoC

suil12/CVE-2025-24813_presentation

CVE-2025-24813CRITICALsob ataque19 mai 2026

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.