Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
GitHub PoC★ 2
CVE-2026-73570
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp
100RISCO
abrir ↗VulnCheck XDB
info-leak
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
78RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-102427 is an unauthenticated remote code execution flaw in OrdaSoft Joomla Content Construction Kit (OS CCK) — Joomla component com_os_cck.
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16
48RISCO
abrir ↗GitHub PoC
Sanitized report summary and local PoC for CVE-2026-103442
MergeAccount PHP object injection via session-key substitution
41RISCO
abrir ↗GitHub PoC
JailBr3ak/CVE-2026-97347
Post Views Stats Counter <= 1.1.7 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
41RISCO
abrir ↗GitHub PoC★ 2
EUVD-2026-89950 Improper Handling of URL Encoding (Hex Encoding) (CWE-177)
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
90RISCO
abrir ↗GitHub PoC
CVE-2026-102425 PoC (PoCbit) — Joomla Balbooa Forms (com_baforms) <2.4.3.4 unauth RCE via field shortcode injection in post-submission PHP eval(). check + exploit + mass bulk. https://pocbit.org/pocs/cve-2026-102425
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
48RISCO
abrir ↗GitHub PoC
Sanitized report summary and local PoC for CVE-2026-103446
WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments
41RISCO
abrir ↗GitHub PoC
Sanitized report summary and local PoC for CVE-2026-103437
ReadingLists imported metadata permits JavaScript URL XSS
28RISCO
abrir ↗GitHub PoC
Security PoC payload host for CVE-2026-91159 oEmbed test (authorized bug bounty)
Discourse: Stored oEmbed HTML injection via allowed iframe
41RISCO
abrir ↗GitHub PoC
kikozz/CVE-2013-3660-win32k.sys
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo
98RISCO
abrir ↗GitHub PoC
single PoC for CVE-2026-18143 Unauth AFU (Arbitrary File Upload)
Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler
63RISCO
abrir ↗GitHub PoC
Local classroom demo of NoSQL operator injection in LangGraph's MongoDBSaver (GHSA-98xf-r82g-9mhx / CVE-2026-48121). Fictional data only.
@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access
33RISCO
abrir ↗VulnCheck XDB
initial-access
Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module
48RISCO
abrir ↗GitHub PoC
wuyou6956-glitch/cve-2026-85706
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗VulnCheck XDB
initial-access
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
100RISCO
abrir ↗VulnCheck XDB
initial-access
Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler
63RISCO
abrir ↗VulnCheck XDB
initial-access
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
100RISCO
abrir ↗VulnCheck XDB
info-leak
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-73570
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp
100RISCO
abrir ↗VulnCheck XDB
initial-access
Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field
63RISCO
abrir ↗GitHub PoC★ 1
Next.js next/og unauthenticated RCE (CVE-2026-94545) - PoC
Satori-generated SVG has improper escaping
33RISCO
abrir ↗VulnCheck XDB
initial-access
Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter
63RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-73570
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.