Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

14.946 exploits

GitHub PoC

CVE-2026-70376 — Pluck CMS site-wide CSRF (fail-open Referer check) → RCE via double-extension upload. CWE-352/434, CVSS 8.0. Advisory + PoC by @IlhomjonR.

CVE-2026-70376CRITICAL12 ago 2026

Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE

48RISCO

GitHub PoC

关于CVE-2026-64563未完全验证的一种利用思路

CVE-2026-64563HIGH12 ago 2026

rhashtable: clear stale iter->p on table restart

41RISCO

GitHub PoC★ 1

MCP environment-variable blocklist bypass leads to unauthenticated RCE in Flowise 3.1.1

CVE-2026-69263HIGH12 ago 2026

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

41RISCO

GitHub PoC★ 1

ZildanZ/CVE-2026-64638

CVE-2026-64638HIGH12 ago 2026

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici

68RISCO

GitHub PoC

Public vulnerability advisory and supporting evidence for CVE-2026-67846 affecting the BOOM v3/v4 NBDTLB implementation.

CVE-2026-67846HIGH12 ago 2026

Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect priv

21RISCO

GitHub PoC★ 3

SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko. Device-verified 2026-08-12.

CVE-2026-43499HIGH12 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC★ 4

vivo/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本

CVE-2026-43499HIGH12 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC★ 12

CVE-2026-0075 — Android ContactsProvider information disclosure via JSON error side-channel, including PoC, root-cause analysis, and patch details.

CVE-2026-0075HIGH12 ago 2026

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead t

41RISCO

GitHub PoC

CVE-2026-50656, CVE-2026-69414

CVE-2026-50656HIGH12 ago 2026

Microsoft Defender Elevation of Privilege Vulnerability

46RISCO

GitHub PoC

DavidCarliez/cve-2026-62737-lab

CVE-2026-62737HIGH11 ago 2026

Windows Kernel Elevation of Privilege Vulnerability

41RISCO

GitHub PoC

Hunt-Benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

CVE-2026-18907HIGH11 ago 2026

PathTravelsal Vulnerability in com.talpa.hibrowser

41RISCO

GitHub PoC

PoC exploit for CVE-2022-35914 — GLPI v.10.0.2 htmLawed command injection, command execution, and reverse shell support.

CVE-2022-35914CRITICALsob ataque11 ago 2026

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RISCO

GitHub PoC★ 1

CopyEscape (CVE-2026-17106) docker cp container-to-host arbitrary file write PoC mirror — Imperva Ron Masas, MIT; for authorized security testing

CVE-2026-17106HIGH11 ago 2026

Tar extraction in moby/go-archive can write outside the destination directory via link following

41RISCO

GitHub PoC

Defensive security research, SIEM rules, and remediation tools for CVE-2026-18577 & StormEncryptor ransomware.

CVE-2026-18577HIGHsob ataque11 ago 2026

Incomplete patch leads to administrative account takeover

98RISCO

GitHub PoC

CVE-2025-64459 vulnerable by design app

CVE-2025-64459CRITICAL11 ago 2026

Potential SQL injection via _connector keyword argument in QuerySet and Q objects

53RISCO

GitHub PoC

CVE-2026-48710漏洞验证代码

CVE-2026-48710MEDIUM11 ago 2026

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

48RISCO

GitHub PoC★ 1

CVE-2026-43499 GhostLock futex UAF LPE PoC for OPPO PCKM00 (SM6150) / Linux 4.14.180

CVE-2026-43499HIGH11 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC★ 1

YellowKey BitLocker CVE-2026-45585 - free BitLocker recovery key extractor and vulnerability tool. Bitlocker yellowkey, yellowkey bitlocker, yellowkey github, cve-2026-45585, yellowkey vulnerability, yellowkey exploit, chaotic eclipse. Free 2026.

CVE-2026-45585MEDIUM11 ago 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

GitHub PoC

CVE-2026-9198利用代码

CVE-2026-9198CRITICALsob ataque11 ago 2026

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

100RISCO

GitHub PoC

keithbennedict/CVE-2026-41940-Linux

CVE-2026-41940CRITICALsob ataqueransomware11 ago 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISCO

GitHub PoC

AegisAgent - Runtime security gateway & privilege governance for AI agents. Cryptographic tool-call provenance (CoreBreak/CVE-2026-18830/18236/64650 defense), policy engine, sandbox isolation, HITL approval, MCP security proxy, tamper-evident audit.

CVE-2026-18830HIGH11 ago 2026

Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API

41RISCO

GitHub PoC★ 33

CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC

CVE-2026-68138HIGH11 ago 2026

net/sched: serialize qdisc_rtab_list against concurrent get/put

41RISCO

GitHub PoC★ 2

CVE-2026-43499 (GhostLock) rtmutex remove_waiter() UAF local-root PoC adapted for Qualcomm Android 4.19 kernels (Redmi K40 / Snapdragon 870 class), LD_PRELOAD based

CVE-2026-43499HIGH11 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC

DaemonSet для митигации уязвимости CVE-2026-64564 (SCTPhantom)

CVE-2026-64564CRITICAL11 ago 2026

sctp: don't free the ASCONF's own transport in DEL-IP processing

48RISCO

GitHub PoC★ 2

Persistent XSS in Typemill CMS: the Markdown parser lets javascript: URIs through unfiltered. Writeup + PoC.

CVE-2026-44401MEDIUM11 ago 2026

Typemill CMS 2.x Persistent XSS via Markdown javascript URI

33RISCO

GitHub PoC★ 1

Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free

CVE-2026-64564CRITICAL10 ago 2026

sctp: don't free the ASCONF's own transport in DEL-IP processing

48RISCO

GitHub PoC★ 1

Saku0512/CVE-2026-9086-poc

CVE-2026-9086HIGH10 ago 2026

Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass

41RISCO

GitHub PoC

Authorized Kali–Metasploitable2 lab using Python and Nmap NSE to validate CVE-2011-2523 in vsFTPd 2.3.4.

CVE-2011-2523—10 ago 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

GitHub PoC★ 1

IamDremig/CVE-2026-14802

CVE-2026-14802MEDIUM10 ago 2026

react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

33RISCO

GitHub PoC

CVE-2026-20685 - Draft or TODO

CVE-2026-20685MEDIUM10 ago 2026

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addres

33RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.