Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
GitHub PoC★ 4
CVE-2026-12793 PoC — JetFormBuilder ≤3.6.2 unauth Register User / admin account creation
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
48RISCO
abrir ↗GitHub PoC★ 1
My first CVE
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoi
33RISCO
abrir ↗VulnCheck XDB
info-leak
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISCO
abrir ↗GitHub PoC
shivammittal2403/cve-2026-80428-ctf
ILIAS PHP Object Injection via Shibboleth Logout
48RISCO
abrir ↗GitHub PoC
Langflow 1.10.0 urllib SSRF
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
28RISCO
abrir ↗GitHub PoC★ 8
Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail
Craft CMS Allows Remote Code Execution
100RISCO
abrir ↗GitHub PoC
FabianCH20/SOC335---CVE-2024-49138-Exploitation-Detected
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir ↗GitHub PoC★ 1
Proof-of-Concept for CVE-2026-92680, the insecurely protected credentials vulnerability affecting Araxis Merge.
Araxis Merge insufficiently protected credentials
33RISCO
abrir ↗GitHub PoC★ 49
container escape POCs for CVE-2026-80521 and CVE-2026-52910
af_unix: Unlink scc_entry in unix_del_edge().
41RISCO
abrir ↗VulnCheck XDB
initial-access
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
63RISCO
abrir ↗GitHub PoC★ 1
Issabel pbxapi hard coded JWT RCE POC
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
63RISCO
abrir ↗GitHub PoC★ 3
0xgh0stri13y/CVE-2026-109519
YouTransfer Template Rendering template path traversal
33RISCO
abrir ↗GitHub PoC★ 3
Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr)
Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
33RISCO
abrir ↗GitHub PoC
CVE-2021-29447 is an authenticated XML External Entity (XXE) vulnerability in WordPress
WordPress Authenticated XXE attack when installation is running PHP 8
63RISCO
abrir ↗GitHub PoC
Information on the security content of Apple software updates
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS
33RISCO
abrir ↗GitHub PoC
rootxn/CVE-2026-12793
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
48RISCO
abrir ↗GitHub PoC★ 10
research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS
33RISCO
abrir ↗GitHub PoC
fix for not working exploit script on exploitdb (50057.py)
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil
60RISCO
abrir ↗VulnCheck XDB
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
abrir ↗GitHub PoC
CVE-2026-15315, CVE-2026-15316 - Draft or TODO
Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200
41RISCO
abrir ↗GitHub PoC
CVE-2026-76461 - Draft or TODO
Cisco Secure Email Gateway SQL Injection Vulnerability
100RISCO
abrir ↗GitHub PoC★ 1
PoC for CVE-2026-17633 — Authenticated RCE in IBM Langflow OSS 1.0.0–1.10.3 via custom_component endpoint. Includes CVE-2026-17632 AST scanner bypass research.
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
41RISCO
abrir ↗GitHub PoC
Laboratorio académico de análisis y explotación de CVE-2025-5548 en FreeFloat FTP Server 1.0.
FreeFloat FTP Server NOOP Command buffer overflow
38RISCO
abrir ↗GitHub PoC★ 13
PoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
48RISCO
abrir ↗GitHub PoC
Authenticated Arbitrary File Upload leading to Remote Code Execution Technical analysis and controlled reproduction of CVE-2026-38526 in Webkul Krayin CRM 2.2.x.
An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x a
48RISCO
abrir ↗GitHub PoC
Testing for CVE-2025-8191
macrozheng mall Swagger UI index.html cross site scripting
33RISCO
abrir ↗GitHub PoC
e5dfdd568a75282b712b6d93a7a18e12/CVE-2025-24813
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.