Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados

41.197CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentes populares risco

89.220 exploits

GitHub PoC★ 1

A comprehensive collection of 12 containerized web exploitation challenges covering CVE-2023-25690, WebAuthn bypasses, HTTP/3 smuggling, and advanced XSS/RCE chains

CVE-2023-25690CRITICAL05 abr 2026

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RISCO

GitHub PoC

Um estudo de caso do CVE-2024-21413. Usado como parâmetro a sala do TryHackMe Moniker Link (CVE-2024-21413). Feito edições com claude code no exploit.

CVE-2024-21413CRITICALsob ataque05 abr 2026

Microsoft Outlook Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

client-side

CVE-2024-21413CRITICALsob ataque05 abr 2026

Microsoft Outlook Remote Code Execution Vulnerability

100RISCO

GitHub PoC

ElinaNotElina/cve-2024-3094-analysis

CVE-2024-3094CRITICAL04 abr 2026

Xz: malicious code in distributed source

70RISCO

GitHub PoC

Analysis and exploitation of a Next.js authorization bypass vulnerability (CVE-2025-29927)

CVE-2025-29927CRITICAL04 abr 2026

Authorization Bypass in Next.js Middleware

85RISCO

GitHub PoC

Dahalsamir/CVE-2011-2523-exploit

CVE-2011-2523—04 abr 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

GitHub PoC

Technical analysis of CVE-2025-55182 (React2Shell RCE vulnerability)

CVE-2025-55182CRITICALsob ataqueransomware04 abr 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

GitHub PoC

5th RCE OS Command Injection on Data Input

CVE-2026-39902HIGH04 abr 2026

Cacti: Authenticated RCE on Data Input

41RISCO

GitHub PoC

Pre-authentication LFI Lead to RCE

CVE-2026-39938CRITICAL04 abr 2026

Cacti: Unauthenticated RCE on Graph Image

48RISCO

VulnCheck XDB

local

CVE-2024-49138HIGHsob ataque04 abr 2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISCO

GitHub PoC

vettrivel007/CVE-2024-49138

CVE-2024-49138HIGHsob ataque04 abr 2026

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISCO

VulnCheck XDB

remote-with-credentials

CVE-2022-30075—03 abr 2026

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

35RISCO

GitHub PoC★ 2

Perforce security research and tools - CVE-2026-6043

CVE-2026-6043HIGH03 abr 2026

Insecure Default Configuration in P4 Server

41RISCO

GitHub PoC

CVE-2025-59059: Misattributed RCE in Apache Ranger Static Analysis Correction

CVE-2025-59059CRITICAL03 abr 2026

Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

48RISCO

GitHub PoC★ 1

CVE-2026-0770

CVE-2026-0770CRITICALsob ataque03 abr 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

TP-Link Router Authenticated RCE Exploit (CVE-2022-30075) Bu araç, TP-Link Archer AX50 ve bazı diğer TP-Link router modellerinde bulunan **CVE-2022-30075** güvenlik açığını kullanarak kimliği doğrulanmış uzaktan komut çalıştırma (Authenticated Remote Code Execution) işlemi gerçekleştirir.

CVE-2022-30075—03 abr 2026

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

35RISCO

GitHub PoC

CVE-2026-34156

CVE-2026-34156CRITICAL03 abr 2026

NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

75RISCO

GitHub PoC★ 1

CVE-2026-0770

CVE-2026-0770CRITICALsob ataque03 abr 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RISCO

GitHub PoC

Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal (CVE-2026-5027)

CVE-2026-5027HIGH03 abr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

GitHub PoC

CVE-2026-5027

CVE-2026-5027HIGH03 abr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

GitHub PoC★ 3

Langflow, Remote Code Execution (RCE) via Cron Job Injection through Path Traversal

CVE-2026-5027HIGH03 abr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

GitHub PoC

CVE-2026-5027

CVE-2026-5027HIGH03 abr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

GitHub PoC★ 1

Exploit CVE-2022-46363

CVE-2022-46364CRITICAL03 abr 2026

Apache CXF SSRF Vulnerability

48RISCO

GitHub PoC

Provenance-aware Linux kernel vulnerability research harness used in the investigation of CVE-2026-53075

CVE-2026-53075HIGH03 abr 2026

ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

41RISCO

GitHub PoC★ 1

Bash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.

CVE-2025-55182CRITICALsob ataqueransomware03 abr 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

GitHub PoC

tryj/CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823CRITICALsob ataque03 abr 2026

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RISCO

VulnCheck XDB

remote-with-credentials

CVE-2026-5027HIGH03 abr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

VulnCheck XDB

initial-access

CVE-2026-5027HIGH03 abr 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

GitHub PoC

CVE-2026-34156

CVE-2026-34156CRITICAL03 abr 2026

NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

75RISCO

GitHub PoC

🛡️ SSH User Enumeration (CVE-2018-15473). Python 3, multihilo y calibración anti-falsos positivos. 🧵

CVE-2018-15473MEDIUM02 abr 2026

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.