Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
VulnCheck XDB
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
abrir ↗GitHub PoC
fix for not working exploit script on exploitdb (50057.py)
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil
60RISCO
abrir ↗GitHub PoC
0xf9b6a41ec/CVE-2026-69328
Windows Storage Elevation of Privilege Vulnerability
41RISCO
abrir ↗VulnCheck XDB
initial-access
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil
60RISCO
abrir ↗GitHub PoC
Testing for CVE-2025-8191
macrozheng mall Swagger UI index.html cross site scripting
33RISCO
abrir ↗GitHub PoC
Tenda Technology Co., Ltd NVR_4H: CH3 v2.1.V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
41RISCO
abrir ↗VulnCheck XDB
local
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
41RISCO
abrir ↗GitHub PoC★ 4
CVE-2026-82329 – JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) | Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interactive menu, resistence, WAF bypass etc.), SafeChecker (version detect, audit, JSON report). 🦾 Use Ethically, Stay Legal :V
Potential authentication bypass leading to administrative access in Artifactory
98RISCO
abrir ↗GitHub PoC
isaca0315/CVE-2026-65013-BOLA-IDOR
Onlook tRPC Insecure Direct Object Reference via multiple procedures
41RISCO
abrir ↗VulnCheck XDB
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
abrir ↗GitHub PoC★ 13
PoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
48RISCO
abrir ↗GitHub PoC
FLX-0x00/CVE-2026-59550
WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability
48RISCO
abrir ↗VulnCheck XDB
initial-access
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
100RISCO
abrir ↗GitHub PoC★ 3
Langflow 1.10.0 urllib SSRF POC
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
28RISCO
abrir ↗GitHub PoC
CVE-2026-85706 — GitLab unauthenticated arbitrary file read (CVSS 10.0). Root-cause analysis, vulnerable Docker lab, and PoC.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗VulnCheck XDB
initial-access
Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret
56RISCO
abrir ↗VulnCheck XDB
initial-access
Anonymous user token generation exposure in JFrog Artifactory
66RISCO
abrir ↗GitHub PoC
CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read exploit PoC.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗GitHub PoC
miniOrange 2FA CVE POC
miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link Validator
48RISCO
abrir ↗GitHub PoC
hands on investigation of the heartbleed vulnerability (CVE-2014-0160).
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISCO
abrir ↗GitHub PoC
Knowns 0.30.0: Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem
knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header
48RISCO
abrir ↗VulnCheck XDB
info-leak
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗GitHub PoC
CVE-2026-86218 - N-able N-central Struts BeanUtils Unauthenticated RCE
pre-authentication remote code execution
98RISCO
abrir ↗Metasploit600
Cisco Secure Email Gateway ECS Message-ID SQL Injection RCE
Cisco Secure Email Gateway SQL Injection Vulnerability
100RISCO
abrir ↗Metasploit600
Cisco Secure Email Gateway S/MIME SQL Injection RCE
Cisco Secure Email Gateway Security Hardening Release
43RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.