Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados

36.945CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8.970Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

15.312 exploits

GitHub PoC★ 8

ZenoMinder Blind SQL Injection PoC

CVE-2024-51482CRITICAL08 mar 2026

Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64

75RISCO

abrir ↗

GitHub PoC

ZoneMinder Time-Based SQL Injection (CVE-2024-51482) Exploit POC

CVE-2024-51482CRITICAL08 mar 2026

Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64

75RISCO

abrir ↗

GitHub PoC★ 2

lil0xplorer/CVE-2025-60787_PoC

CVE-2025-60787HIGH08 mar 2026

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name

61RISCO

abrir ↗

GitHub PoC★ 824

CVE-2026-24061 exploit PoC

CVE-2026-24061CRITICALsob ataque08 mar 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RISCO

abrir ↗

GitHub PoC

Yetazyyy/CVE-2026-0770

CVE-2026-0770CRITICALsob ataque08 mar 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

gustavorobertux/cisco-cve-2023-20198-checker

CVE-2023-20198CRITICALsob ataque08 mar 2026

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

abrir ↗

GitHub PoC

An automated, high-precision zero-shot evaluation pipeline for OpenAI's CLIP model on CIFAR-10. Features 88.80% accuracy, Safetensors security mitigation (CVE-2025-32434), and AI Native (Trae) workflow.

CVE-2025-32434CRITICAL08 mar 2026

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

48RISCO

abrir ↗

GitHub PoC

Dockerized vulnerable lab demonstrating CVE-2024-2083 in ZenML, a path traversal vulnerability in the step logs API allowing arbitrary file read.

CVE-2024-2083CRITICAL08 mar 2026

Directory Traversal in zenml-io/zenml

60RISCO

abrir ↗

GitHub PoC

Penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft, including attack execution, hash cracking, and defensive countermeasures

CVE-2024-21413CRITICALsob ataque08 mar 2026

Microsoft Outlook Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

0axz-tools/CVE-2025-6440

CVE-2025-6440CRITICAL08 mar 2026

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

60RISCO

abrir ↗

GitHub PoC

A demo and explanation of CVE-2026-31431

CVE-2026-31431HIGHsob ataque08 mar 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC

Exploit for CVE-2023-27372 with interactiev shell

CVE-2023-27372CRITICAL07 mar 2026

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

85RISCO

abrir ↗

GitHub PoC★ 14

Authenticated time-based blind SQL injection PoC for ZoneMinder CVE-2024-51482 (v1.37.* <= 1.37.64)

CVE-2024-51482CRITICAL07 mar 2026

Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64

75RISCO

abrir ↗

GitHub PoC★ 2

Go PoC for CVE-2025-32433 — unauthenticated RCE in Erlang/OTP SSH.

CVE-2025-32433CRITICALsob ataque07 mar 2026

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC

CVE-2020-1350的PoC

CVE-2020-1350CRITICALsob ataque07 mar 2026

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 1

Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through client-side validation bypass, allowing attackers to execute arbitrary commands via configuration files.

CVE-2025-60787HIGH07 mar 2026

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name

61RISCO

abrir ↗

GitHub PoC

luoqichen/CVE-2025-55182-POC

CVE-2025-55182CRITICALsob ataqueransomware06 mar 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

abrir ↗

GitHub PoC

this is a metasploit exploit module for CVE-2024-25096 and CVE-2023-3452

CVE-2023-3452CRITICAL06 mar 2026

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

63RISCO

abrir ↗

GitHub PoC

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque06 mar 2026

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

GitHub PoC

Full-cycle Pentest on Metasploitable (VMware/Kali). Scanned services (Apache Tomcat/8180), researched CVE-2002-0936 via Exploit-DB, and gained access using default creds (Metasploit). Performed local enumeration for SUID misconfigs, exploiting a legacy Nmap binary to escalate privileges to Root.

CVE-2002-0936—06 mar 2026

The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the w

28RISCO

abrir ↗

GitHub PoC

Asus Router Arbitrary File Write to Remote Code Execution PoC - Fk Mirai

CVE-2024-3912CRITICAL06 mar 2026

ASUS Router - Upload arbitrary firmware

48RISCO

abrir ↗

GitHub PoC★ 5

MindsDB Path Traversal to RCE PoC

CVE-2026-27483HIGH06 mar 2026

MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

61RISCO

abrir ↗

GitHub PoC★ 2

yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462LOW05 mar 2026

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo

28RISCO

abrir ↗

GitHub PoC★ 1

PoC of BLE cache poisoning attack

CVE-2026-51376MEDIUM05 mar 2026

An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause a denial of service via an unauthenticated MESSAGE

33RISCO

abrir ↗

GitHub PoC

shakyanayann/CVE-2022-0185

CVE-2022-0185HIGHsob ataque05 mar 2026

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISCO

abrir ↗

GitHub PoC★ 1

Technical analysis and proof-of-concept for CVE-2024-1086, a Linux kernel nf_tables use-after-free vulnerability leading to local privilege escalation. Includes vulnerability breakdown, affected versions, exploitation methodology, and mitigation guidance for research and educational purposes.

CVE-2024-1086HIGHsob ataqueransomware04 mar 2026

Use-after-free in Linux kernel's netfilter: nf_tables component

76RISCO

abrir ↗

GitHub PoC

arrhenius975/CVE-2024-38063-Exploit-Refactoring

CVE-2024-38063CRITICAL04 mar 2026

Windows TCP/IP Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC

prabeershakya/CVE-2022-0185-POC

CVE-2022-0185HIGHsob ataque04 mar 2026

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISCO

abrir ↗

GitHub PoC

HazaVVIP/CVE-2025-30208

CVE-2025-30208MEDIUM04 mar 2026

Vite bypasses server.fs.deny when using `?raw??`

70RISCO

abrir ↗

GitHub PoC★ 2

Faridi-m/CVE-2021-22911-RocketChat

CVE-2021-22911—04 mar 2026

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.