Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

71.886 exploits

GitHub PoC★ 1

End-to-end vulnerability management lifecycle on Azure Windows Server 2025. Features OS patching and network-level compensating controls (NSG) to mitigate CVE-2025-14847.

CVE-2025-14847HIGHsob ataque06 abr 2026

Zlib compressed protocol header length confusion may allow memory read

100RISCO

Exploit-DB

Windows Kernel - Elevation of Privilege

CVE-2025-62215HIGHsob ataque06 abr 2026

Windows Kernel Elevation of Privilege Vulnerability

71RISCO

GitHub PoC

open-flaw/CVE-2025-49844

CVE-2025-49844CRITICAL06 abr 2026

Redis Lua Use-After-Free may lead to remote code execution

85RISCO

GitHub PoC

zsxen/cve-2025-1974-lab

CVE-2025-1974CRITICAL06 abr 2026

ingress-nginx admission controller RCE escalation

85RISCO

Exploit-DB

Desktop Window Manager Core Library 10.0.10240.0 - Privilege Escalation

CVE-2025-59254HIGH06 abr 2026

Microsoft DWM Core Library Elevation of Privilege Vulnerability

41RISCO

VulnCheck XDB

denial-of-service

CVE-2025-49844CRITICAL06 abr 2026

Redis Lua Use-After-Free may lead to remote code execution

85RISCO

VulnCheck XDB

initial-access

CVE-2025-55182CRITICALsob ataqueransomware06 abr 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

GitHub PoC

Um estudo de caso do CVE-2024-21413. Usado como parâmetro a sala do TryHackMe Moniker Link (CVE-2024-21413). Feito edições com claude code no exploit.

CVE-2024-21413CRITICALsob ataque05 abr 2026

Microsoft Outlook Remote Code Execution Vulnerability

100RISCO

GitHub PoC

Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability.

CVE-2017-5638CRITICALsob ataqueransomware05 abr 2026

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC

python code for CVE-2018-15473, using paramiko

CVE-2018-15473MEDIUM05 abr 2026

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

GitHub PoC

rachidafaf/bola-CVE-2023-27524

CVE-2023-27524HIGHsob ataque05 abr 2026

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RISCO

GitHub PoC★ 1

A comprehensive collection of 12 containerized web exploitation challenges covering CVE-2023-25690, WebAuthn bypasses, HTTP/3 smuggling, and advanced XSS/RCE chains

CVE-2023-25690CRITICAL05 abr 2026

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RISCO

VulnCheck XDB

client-side

CVE-2024-21413CRITICALsob ataque05 abr 2026

Microsoft Outlook Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

initial-access

CVE-2017-5638CRITICALsob ataqueransomware05 abr 2026

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC

Analysis and exploitation of a Next.js authorization bypass vulnerability (CVE-2025-29927)

CVE-2025-29927CRITICAL04 abr 2026

Authorization Bypass in Next.js Middleware

85RISCO

GitHub PoC

vettrivel007/CVE-2024-49138

CVE-2024-49138HIGHsob ataque04 abr 2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISCO

GitHub PoC

ElinaNotElina/cve-2024-3094-analysis

CVE-2024-3094CRITICAL04 abr 2026

Xz: malicious code in distributed source

70RISCO

GitHub PoC

Technical analysis of CVE-2025-55182 (React2Shell RCE vulnerability)

CVE-2025-55182CRITICALsob ataqueransomware04 abr 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

GitHub PoC

Dahalsamir/CVE-2011-2523-exploit

CVE-2011-2523—04 abr 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

VulnCheck XDB

local

CVE-2024-49138HIGHsob ataque04 abr 2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISCO

GitHub PoC

Pre-authentication LFI Lead to RCE

CVE-2026-39938CRITICAL04 abr 2026

Cacti: Unauthenticated RCE on Graph Image

48RISCO

GitHub PoC★ 2

Perforce security research and tools - CVE-2026-6043

CVE-2026-6043HIGH03 abr 2026

Insecure Default Configuration in P4 Server

41RISCO

GitHub PoC

CVE-2025-59059: Misattributed RCE in Apache Ranger Static Analysis Correction

CVE-2025-59059CRITICAL03 abr 2026

Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

48RISCO

GitHub PoC

tryj/CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823CRITICALsob ataque03 abr 2026

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RISCO

GitHub PoC★ 1

Bash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.

CVE-2025-55182CRITICALsob ataqueransomware03 abr 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

GitHub PoC★ 1

TP-Link Router Authenticated RCE Exploit (CVE-2022-30075) Bu araç, TP-Link Archer AX50 ve bazı diğer TP-Link router modellerinde bulunan **CVE-2022-30075** güvenlik açığını kullanarak kimliği doğrulanmış uzaktan komut çalıştırma (Authenticated Remote Code Execution) işlemi gerçekleştirir.

CVE-2022-30075—03 abr 2026

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

35RISCO

VulnCheck XDB

remote-with-credentials

CVE-2026-5027HIGH03 abr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

GitHub PoC★ 1

Exploit CVE-2022-46363

CVE-2022-46364CRITICAL03 abr 2026

Apache CXF SSRF Vulnerability

48RISCO

VulnCheck XDB

initial-access

CVE-2026-5027HIGH03 abr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

VulnCheck XDB

remote-with-credentials

CVE-2022-30075—03 abr 2026

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

35RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.