Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

80.184 exploits

VulnCheck XDB

info-leak

CVE-2025-4396HIGH10 mai 2026

Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection

56RISCO

abrir ↗

GitHub PoC

CVE-2026-7270 FreeBSD local privilege escalation via exec_args_adjust_args OOB memmove

CVE-2026-7270HIGH09 mai 2026

Local privilege escalation via execve()

21RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-1938CRITICALsob ataque09 mai 2026

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISCO

abrir ↗

GitHub PoC

Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

CVE-2026-31431HIGHsob ataque09 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-21510 LNK generator PoC

CVE-2026-21510HIGHsob ataque09 mai 2026

Windows Shell Security Feature Bypass Vulnerability

76RISCO

abrir ↗

GitHub PoC★ 3

Read-only checker for CVE-2026-31431 (algif_aead local root). Reports kernel/module state and suggests mitigations.

CVE-2026-31431HIGHsob ataque09 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC

Proof-of-concept exploits for CVE-2026-4390, CVE-2026-4391 and CVE-2026-4392 in TeamSpeak 3 server (3.13.7).

CVE-2026-4390MEDIUM09 mai 2026

TeamSpeak 3 Server Connection State Management process_resend_queue use after free

33RISCO

abrir ↗

GitHub PoC★ 4

CVE-2020-14008 - ManageEngine Applications Manager RCE

CVE-2020-14008—09 mai 2026

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in

35RISCO

abrir ↗

GitHub PoC

This script will attempt to mitigate the copy_fail attack. CVE-2026-31431

CVE-2026-31431HIGHsob ataque09 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC

Black-box penetration test on Metasploitable 2 — Identified 3 critical vulnerabilities including CVE-2011-2523. Conducted in isolated VMware lab. Tools: Nmap, Metasploit, Netcat.

CVE-2011-2523—09 mai 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque09 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque09 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC

Hack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110

CVE-2025-58434CRITICAL09 mai 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

75RISCO

abrir ↗

GitHub PoC

Kernel patches for Dirty Frag vulnerability (CVE-2026-43284, CVE-2026-43500)

CVE-2026-43284HIGH09 mai 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

GitHub PoC

Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware simulation, VAPT analysis, and security patch implementation in a controlled lab environment.

CVE-2020-25213CRITICALsob ataque09 mai 2026

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra

100RISCO

abrir ↗

GitHub PoC★ 1

This repository provides a reproduction environment for CVE-2026-44656.

CVE-2026-44656MEDIUM09 mai 2026

Vim: OS Command Injection via 'path' completion

13RISCO

abrir ↗

GitHub PoC

Defensive exposure assessment tool for identifying externally accessible cPanel, WHM, and Webmail management interfaces related to CVE-2026-41940.

CVE-2026-41940CRITICALsob ataqueransomware09 mai 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISCO

abrir ↗

GitHub PoC

Elegant C++ exploit for CVE-2026-31431 (Copy Fail) using AF_ALG authenticated encryption + splice(2) to overwrite setuid binary memory

CVE-2026-31431HIGHsob ataque09 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC

CVE-2020-1938 Exploit

CVE-2020-1938CRITICALsob ataque09 mai 2026

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISCO

abrir ↗

GitHub PoC

kaleth4/CVE-2026-32746

CVE-2026-32746CRITICAL09 mai 2026

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption

53RISCO

abrir ↗

GitHub PoC★ 7

Read-only checker for CVE-2026-43284 / CVE-2026-43500 (Dirty Frag) Linux kernel local-root vulns

CVE-2026-43284HIGH09 mai 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

GitHub PoC

Helios973/CVE-2026-31431_exp.c

CVE-2026-31431HIGHsob ataque09 mai 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC

CVE-2026-0073HIGH09 mai 2026

In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic err

41RISCO

abrir ↗

GitHub PoC

A bash script for mitigating linux dirtyfrag exploit CVE-2026-43500, and fragnesia

CVE-2026-43500HIGH09 mai 2026

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

78RISCO

abrir ↗

GitHub PoC

Sidjaz/CrushFTP-CVE-2024-4040-Proof-of-Concept

CVE-2024-4040CRITICALsob ataque08 mai 2026

Unauthenticated arbitrary file read and remote code execution in CrushFTP

100RISCO

abrir ↗

GitHub PoC

EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation

CVE-2026-33534MEDIUM08 mai 2026

EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation

48RISCO

abrir ↗

GitHub PoC

AegisGraph: graph-based application-layer assessment evidence platform for Secure Messaging Applications (SMAs). DARPA ASEMA HR0011SB20254-12 Tier 3 research. ReproChain CVE-2023-4863 reachability + PolyDiff differential parser fuzzing + claim-state governance + reproducible benchmark surface.

CVE-2023-4863HIGHsob ataque08 mai 2026

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

GitHub PoC

Exploiting Parsec for Windows to gain SYSTEM privileges

CVE-2026-54424HIGH08 mai 2026

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri

41RISCO

abrir ↗

GitHub PoC★ 18

A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploiting the Dirty Frag (CVE-2026-43284) Linux kernel page-cache corruption vulnerability through shared container image layers.

CVE-2026-43284HIGH08 mai 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

Metasploit400

xfrm-ESP Page-Cache Write via CVE-2026-43284

CVE-2026-43284HIGH08 mai 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.