Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados

40.804CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentes populares risco

88.056 exploits

GitHub PoC

CVE-2026-79417 PoC

CVE-2026-79417MEDIUM25 set 2026

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privile

33RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-43284HIGH25 set 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

GitHub PoC

Unauthenticated authorization bypass in Customer Reviews for WooCommerce ≤ 5.120.0: holders of a public /cusrev/{formId}/ review link can POST cr_local_forms_submit with arbitrary Media Library attachment IDs in items[].media. Linked files are permanently deleted when the review comment is purged. Python check/exploit PoC (PoCbit catalog).

CVE-2026-89055CRITICAL25 set 2026

Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter

48RISCO

abrir ↗

GitHub PoC

CVE-2026-96512 - sudo - High 7.8 - Authenticated LOCAL TZ=UTC+14 sudo -n /usr/bin/id - Local Privilege Escalation via Time-Window Bypass

CVE-2026-96512HIGH25 set 2026

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

41RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2026-93485HIGH25 set 2026

WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability

56RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-87902HIGHsob ataque25 set 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

100RISCO

abrir ↗

GitHub PoC

Proof of concept for vulnerability CVE-2026-87902 in Wordpress

CVE-2026-87902HIGHsob ataque25 set 2026

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-5430 - WSO2 API Manager - Critical 10.0 - Unauthenticated Account Takeover - WSO2 API Control Plane, WSO2 API Manager, WSO2 Traffic Manager, WSO2 Universal Gateway

CVE-2026-5430CRITICALsob ataque25 set 2026

Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover

83RISCO

abrir ↗

GitHub PoC★ 4

CVE-2026-64560 toolkit: Go single-binary toolchain + realme RMX5010 (A16, SM8750) target port

CVE-2026-64560HIGH25 set 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-81648CRITICAL25 set 2026

CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router

48RISCO

abrir ↗

GitHub PoC

Vulnerability advisories by SDshadow - VulDB-style entries with PoC and evidence

CVE-2026-116063MEDIUM25 set 2026

DedeCMS update_guide.php require_once code injection

33RISCO

abrir ↗

GitHub PoC

Benign, self-contained reproduction of CVE-2026-61732 (Decepticon ChatML role-boundary forgery)

CVE-2026-61732CRITICAL25 set 2026

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

48RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-86350 - Apache Tomcat - Critical 9.1 - Unauthenticated GET /header.jsp - HTTP/2 Request Header Mix-up (Request Smuggling)

CVE-2026-86350CRITICAL25 set 2026

Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

48RISCO

abrir ↗

GitHub PoC

Unauthenticated IDOR in Bookly ≤ 28.2: bookly_get_form_id + bookly_render_complete leak any order’s bookly_order token; bookly_add_to_calendar exposes appointments; bookly_rollback_order cancels/deletes non-completed bookings. CVSS 9.1. Python check/exploit PoC — pocbit.org/pocs/cve-2026-93399

CVE-2026-93399CRITICAL25 set 2026

Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameter

48RISCO

abrir ↗

GitHub PoC★ 6

针对 OnePlus Ace6 设备的 cve-2026-64560 复现

CVE-2026-64560HIGH25 set 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RISCO

abrir ↗

GitHub PoC★ 65

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

CVE-2026-93485HIGH25 set 2026

WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability

56RISCO

abrir ↗

GitHub PoC

rmhowe425/POC-CVE-2026-110200

CVE-2026-110200MEDIUM25 set 2026

Langflow OSS is affected by multiple vulnerabilities

33RISCO

abrir ↗

GitHub PoC★ 1

Malicious Register Directive Code Injection Exploit

CVE-2026-65660HIGHsob ataque25 set 2026

Microsoft SharePoint Server Remote Code Execution Vulnerability

71RISCO

abrir ↗

GitHub PoC

rmhowe425/POC-CVE-2026-107329

CVE-2026-107329CRITICAL25 set 2026

Langflow OSS is affected by multiple vulnerabilities

48RISCO

abrir ↗

GitHub PoC

rmhowe425/POC-CVE-2026-107328

CVE-2026-107328CRITICAL25 set 2026

Langflow OSS is affected by multiple vulnerabilities

48RISCO

abrir ↗

GitHub PoC★ 7

MikroTik RouterOS PoC Collection - CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH

CVE-2026-86060CRITICALsob ataque25 set 2026

SSH session privilege manipulation via a crafted username in Mikrotik RouterOS

78RISCO

abrir ↗

GitHub PoC

Ermensonx/sudotimewarp-cve-2026-96512-

CVE-2026-96512HIGH25 set 2026

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

41RISCO

abrir ↗

GitHub PoC

jvidhan/cve-2026-43687

CVE-2026-43687MEDIUM25 set 2026

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadO

33RISCO

abrir ↗

GitHub PoC

rmhowe425/POC-CVE-2026-107326

CVE-2026-107326HIGH25 set 2026

Langflow OSS is affected by multiple vulnerabilities

41RISCO

abrir ↗

GitHub PoC

CVE-2026-65660 - Draft or TODO

CVE-2026-65660HIGHsob ataque25 set 2026

Microsoft SharePoint Server Remote Code Execution Vulnerability

71RISCO

abrir ↗

GitHub PoC★ 4

Unauthenticated privilege escalation in WordPress WAWP (Automation Web Platform) ≤ 4.8.6 via public REST signup and unsanitized wawp_custom_fields → admin. Python check/exploit PoC (PoCbit).

CVE-2026-14281CRITICAL25 set 2026

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

48RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2026-93399CRITICAL25 set 2026

Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameter

48RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2026-62062HIGH25 set 2026

WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability

41RISCO

abrir ↗

GitHub PoC

Samba 3.0.20 username map script command injection exploit — reverse shell via SMB authentication, built from scratch in Python using impacket. No Metasploit.

CVE-2007-2447—25 set 2026

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISCO

abrir ↗

GitHub PoC

Penetration testing report and PoC on Metasploitable2 target, demonstrating CVE-2011-2523 vsFTPd v2.3.4 exploitation via Metasploit.

CVE-2011-2523—25 set 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.