Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
VulnCheck XDB
initial-access
Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp
48RISCO
abrir ↗VulnCheck XDB
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗VulnCheck XDB
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir ↗VulnCheck XDB
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir ↗GitHub PoC
paktiko1986/CVE-2026-82474
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
41RISCO
abrir ↗GitHub PoC
A Python-based security scanner designed to identify potential exposure to critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, which may lead to Out-of-Memory (OOM) conditions and Remote Code Execution (RCE).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
Walkthrough TryHackMe room php2shell — PHP-FPM memory disclosure & pre-auth RCE via upload_progress UAF (CVE-2026-109618, CVE-2026-109619).
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Read-only scanner for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): finds vulnerable PHP, stale processes and webshells, and prints a remediation plan
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Rule Wazuh untuk mendeteksi eksploitasi PHP2Shell (CVE-2026-109618 / CVE-2026-109619) pada server web berbasis PHP (Apache/`mod_php`, Nginx + PHP-FPM)
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Mitigates CVE-2026-98432 via firewall rules
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC
Safe kernel upgrade for CVE-2026-98432 on Ubuntu 24.04 with NVIDIA, and an analysis of the bug
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC
CVE-2026-110447 — Collabora Online "Built-in CODE Server"
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-98432: Linux Kernel TCP/IPv4 Race Condition Use-After-Free (CVSS 9.8) — PoC, Scanner, Detection Rules
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC
xxhjkl/cve-2026-98432-check
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-98432 - Linux IPv4/TCP lab root-shell kit (by thiscitze)
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗VulnCheck XDB
denial-of-service
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISCO
abrir ↗VulnCheck XDB
initial-access
D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in
23RISCO
abrir ↗VulnCheck XDB
local
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
abrir ↗GitHub PoC★ 5
One-tap Android root for Samsung Galaxy devices, built around the CVE-2026-98260 timer exploit.
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC
CVE-2026-88773 - NetScaler nsppe 32-bit chunk-size accumulator wrap (HTTP Request Smuggling)
HTTP Request Smuggling
63RISCO
abrir ↗GitHub PoC★ 1
基于CVE-2026-98260漏洞开发的提权项目
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC
PHP 5.6.40 RPM packages with PHP2Shell security patches for CVE-2026-109618 and CVE-2026-109619 on EL6.
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
Incident Response Case Study: Zero-Day RCE Vulnerability Mitigation & Zero-Downtime Container Hotfix on AWS + Docker (CVE-2026-109618)
RCE via OOM corruption
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.