Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.056exploits catalogados

40.804CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentes populares risco

88.056 exploits

GitHub PoC★ 1

moksh-nfsu/CVE-2026-36392

CVE-2026-36392MEDIUM07 set 2026

FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated administrator can inject

33RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-18366CRITICAL07 set 2026

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

48RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-39987CRITICALsob ataque07 set 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2026-85046HIGHsob ataque07 set 2026

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside

71RISCO

abrir ↗

GitHub PoC

CVE-2026-39987 Proof of Concept

CVE-2026-39987CRITICALsob ataque07 set 2026

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

100RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2020-10770—07 set 2026

A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using

50RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-19598CRITICAL07 set 2026

Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router

63RISCO

abrir ↗

GitHub PoC

iurhfiu6/CVE-2021-4034

CVE-2021-4034HIGHsob ataqueransomware07 set 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC

Linux Kernel Exploits -> CVE-2005-0736 + CVE-2005-1263

CVE-2005-0736—07 set 2026

Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel

23RISCO

abrir ↗

GitHub PoC

Eliot-code/CVE-2026-85046

CVE-2026-85046HIGHsob ataque07 set 2026

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside

71RISCO

abrir ↗

GitHub PoC

Log4Shell (CVE-2021-44228) exploitation from a Kali VM against a vulnerable containerized app, with Splunk-based detection engineering and validated remediation. Covers the full attack lifecycle: exploitation, JNDI and host-level auditd detection, and before/after remediation proof.

CVE-2021-44228CRITICALsob ataqueransomware07 set 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC

StyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells, persistence artifacts, and known indicators of compromise.

CVE-2026-75650CRITICALsob ataque07 set 2026

Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

100RISCO

abrir ↗

GitHub PoC

Linux Kernel Exploits -> CVE-2006-2451 + CVE-2006-3626

CVE-2006-2451—07 set 2026

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l

23RISCO

abrir ↗

GitHub PoC

BlueGate Exploit validator - RD Gateway validator for CVE-2020-0609 and CVE-2020-0610 (BlueGate) using OpenSSL DTLS over UDP/3391.

CVE-2020-0609—07 set 2026

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta

45RISCO

abrir ↗

GitHub PoC

Reproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise

CVE-2015-3306CRITICALsob ataque07 set 2026

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RISCO

abrir ↗

GitHub PoC★ 37

SQL injection vulnerability in Android 17 (AOSP)

CVE-2026-28576CRITICAL07 set 2026

In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to l

48RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-81780 — Hash Form RCE

CVE-2026-81780CRITICAL07 set 2026

WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability

48RISCO

abrir ↗

GitHub PoC

CVE-2026-13181, CVE-2026-13182, CVE-2026-13183, CVE-2026-13184

CVE-2026-13181HIGH07 set 2026

RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

41RISCO

abrir ↗

GitHub PoC

Linux Kernel Exploits -> CVE-2004-0077 + CVE-2004-1235 + caps_to_root

CVE-2004-0077—07 set 2026

The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not prop

23RISCO

abrir ↗

GitHub PoC

Bluex707/React2Shell-CVE-2025-55182-Exploit

CVE-2025-55182CRITICALsob ataqueransomware07 set 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2009-2698—07 set 2026

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel befo

23RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-27101CRITICALsob ataqueransomware07 set 2026

Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.

78RISCO

abrir ↗

GitHub PoC

This interactive suite targets CVE-2014-9222 (Misfortune Cookie) in legacy RomPager web servers, alongside modular testing for CVE-2017-17215 (Huawei HG532 RCE), CVE-2018-14847 (MikroTik WinBox credential leak), and the CVE-2021-27101 / CVE-2021-27102 exploit chain (Accellion FTA).

CVE-2018-14847CRITICALsob ataque07 set 2026

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated

100RISCO

abrir ↗

GitHub PoC

Buffer overflow in FreeFloat FTP Server 1.0

CVE-2025-5548MEDIUM07 set 2026

FreeFloat FTP Server NOOP Command buffer overflow

38RISCO

abrir ↗

GitHub PoC

Linux Kernel Exploits -> CVE-2008-0600 + CVE-2008-0900 + CVE-2008-4210

CVE-2008-0600—07 set 2026

The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer befo

23RISCO

abrir ↗

GitHub PoC

CVE-2017-17215—07 set 2026

Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could se

45RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-67276CRITICAL07 set 2026

SSH user impersonation possible in Mikrotik RouterOS

48RISCO

abrir ↗

GitHub PoC★ 3

CVE-2026-82329 — JFrog Artifactory Auth Bypass

CVE-2026-82329CRITICALsob ataque07 set 2026

Potential authentication bypass leading to administrative access in Artifactory

98RISCO

abrir ↗

GitHub PoC★ 15

CVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit

CVE-2026-67276CRITICAL07 set 2026

SSH user impersonation possible in Mikrotik RouterOS

48RISCO

abrir ↗

GitHub PoC

Linux Kernel Exploits -> CVE-2009-1185 + CVE-2009-1337 + CVE-2009-2692 + CVE-2009-2698 + CVE-2009-3547

CVE-2009-1185—07 set 2026

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to ga

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.