Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.464exploits catalogados

40.695CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentes populares risco

87.464 exploits

GitHub PoC★ 6

PoC for CVE-2026-98432 (Linux kernel IPv4 TCP inet_opt/ireq_opt use-after-free, CVSS 9.8): KASAN-verified UAF reproduction in inet_csk_route_req with A/B fixed-kernel control

CVE-2026-98432CRITICAL31 out 2026

ipv4: free inet_opt and ireq_opt after an RCU grace period

48RISCO

GitHub PoC★ 1

CVE-2026-54523 Kyverno cross-namespace resource generation PoC and exploit

CVE-2026-54523CRITICAL31 out 2026

Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system

48RISCO

GitHub PoC★ 5

CVE-2026-111585 — TeamViewer Remote-Control Screen Decompression Integer Overflow → Heap Buffer Overflow (PoC, fixed in 15.83, CVSS 8.8). Containerized lab + one-command repro with vulnerable/fixed differential evidence.

CVE-2026-111585HIGH31 out 2026

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

41RISCO

GitHub PoC

IPv4 SYN with IP options, one lab target per run, for CVE-2026-98432 research. Header-offset parser, regression tests, and a postmortem of a broken auto-exploiter.

CVE-2026-98432CRITICAL31 out 2026

ipv4: free inet_opt and ireq_opt after an RCU grace period

48RISCO

GitHub PoC★ 2

CVE-2026-103039: Gravity Forms <= 3.1.2 PHP object injection to RCE. PoC by NOXCRYPT (noxcrypt-x). gen_payload.php is not included.

CVE-2026-103039CRITICAL31 out 2026

Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field

48RISCO

GitHub PoC★ 2

PoC for CVE-2026-116366 — ClickHouse Server unauthenticated RCE (brotli v1.2.0 decoder out-of-bounds write): differential detector, weaponized DoS, containerized vulnerable-vs-fixed lab, root-cause analysis

CVE-2026-116366CRITICAL31 out 2026

Unauthenticated RCE vulnerability against ClickHouse Server

63RISCO

GitHub PoC★ 18

macOS revisiond local privilege escalation to root (CVE-2026-112487)

CVE-2026-112487HIGH31 out 2026

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequo

41RISCO

GitHub PoC★ 2

Interim nftables mitigation for Linux kernel CVE-2026-98432 (IPv4-options UAF in tcp_v4_syn_recv_sock) as a reproducible agent skill

CVE-2026-98432CRITICAL31 out 2026

ipv4: free inet_opt and ireq_opt after an RCU grace period

48RISCO

GitHub PoC

CVE-2026-119712 (CVSS 8.5 High) — PipesHub < 0.10.0 SSRF via image URLs in indexed documents (CWE-918). Verified PoC.

CVE-2026-119712MEDIUM31 out 2026

PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents

33RISCO

GitHub PoC★ 1

woshigenm/CVE-2026-89633

CVE-2026-89633CRITICAL31 out 2026

smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

48RISCO

GitHub PoC★ 7

PHP 7.4.33 CLI/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.

CVE-2026-109618CRITICALsob ataque31 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC★ 1

Stopgap firewall mitigation for CVE-2026-98432 on Ubuntu 16.04/24.04

CVE-2026-98432CRITICAL31 out 2026

ipv4: free inet_opt and ireq_opt after an RCU grace period

48RISCO

VulnCheck XDB

info-leak

CVE-2026-101767CRITICAL31 out 2026

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported

48RISCO

GitHub PoC

Grafana alerting contact point authorization bypass via schema downgrade (CVSS 7.7) — containerized lab, full PoC, plus 2 unreported findings reproducible on 13.2.5

CVE-2026-100105HIGH31 out 2026

Alerting contact point authorization bypass via schema downgrade

41RISCO

GitHub PoC

php2shell-CVE-2026-109618/109619 chain

CVE-2026-109618CRITICALsob ataque31 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC★ 1

Bash toolkit that finds and fixes PHP CVEs — PHP2Shell (CVE-2026-109618/109619), CVE-2026-115560, CVE-2024-4577, CVE-2019-11043 — on Linux and macOS. Detects runtimes, audits config, applies source patches, hardens php.ini / FPM / nginx / Apache, hunts compromise, rolls back cleanly. MIT.

CVE-2024-4577CRITICALsob ataqueransomware31 out 2026

Argument Injection in PHP-CGI

100RISCO

GitHub PoC★ 1

Bash toolkit that finds and fixes PHP CVEs — PHP2Shell (CVE-2026-109618/109619), CVE-2026-115560, CVE-2024-4577, CVE-2019-11043 — on Linux and macOS. Detects runtimes, audits config, applies source patches, hardens php.ini / FPM / nginx / Apache, hunts compromise, rolls back cleanly. MIT.

CVE-2019-11043HIGHsob ataqueransomware31 out 2026

Underflow in PHP-FPM can lead to RCE

100RISCO

GitHub PoC

Ansible playbook to mitigate CVE-2026-98432

CVE-2026-98432CRITICAL31 out 2026

ipv4: free inet_opt and ireq_opt after an RCU grace period

48RISCO

GitHub PoC

Check whether a PHP version is patched against PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Stdlib-only Python.

CVE-2026-109618CRITICALsob ataque31 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC★ 1

CVE 2026 98260 vivo x fold6 poc

CVE-2026-98260HIGH31 out 2026

exec: Cleanup POSIX timers right after de_thread()

41RISCO

GitHub PoC

eBPF (XDP/tc) mitigation for CVE-2026-98432 / RHSB-2026-016 - draft

CVE-2026-98432CRITICAL31 out 2026

ipv4: free inet_opt and ireq_opt after an RCU grace period

48RISCO

GitHub PoC★ 4

woshigenm/CVE-2026-98937

CVE-2026-98937—31 out 2026

perf/core: Check kernel access when kernel callchains are requested

23RISCO

GitHub PoC

Detection-only local triage scanner for Linux kernel Fragnesia CVE-2026-46300: grade a running or installed kernel against upstream and distro fixed builds. No payloads, no network.

CVE-2026-46300HIGHsob ataque31 out 2026

net: skbuff: preserve shared-frag marker during coalescing

91RISCO

GitHub PoC★ 1

CVE-2026-120218: bilingual TypeMill stored XSS analysis and safe SVG/XSLT PoC

CVE-2026-120218MEDIUM31 out 2026

Typemill SvgSanitizer.php saveImage cross site scripting

33RISCO

GitHub PoC

antonyantony/cve-2026-98432-nft

CVE-2026-98432CRITICAL31 out 2026

ipv4: free inet_opt and ireq_opt after an RCU grace period

48RISCO

GitHub PoC

Detector and local lab for CVE-2026-98432 (IPv4 TCP UAF in inet_opt/ireq_opt): static analysis, kprobes, the tcp2kaslr trigger vector, and remote-risk evidence. Not an exploit; no RCE.

CVE-2026-98432CRITICAL31 out 2026

ipv4: free inet_opt and ireq_opt after an RCU grace period

48RISCO

GitHub PoC

CVE-2026-63686 demo

CVE-2026-63686HIGH31 out 2026

Apache HTTP Server: mod_xml2enc crash on charset conversion failure

41RISCO

GitHub PoC

Unauthenticated SQL injection (CVSS 9.8) in the Oracle EBS 12.2.312.2.15 TCF servlet

CVE-2026-101767CRITICAL31 out 2026

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported

48RISCO

GitHub PoC★ 3

Tiny Shizuku app that clears stuck 'SMS of Death' (CVE-2026-58882) WAP Push messages. Material 3 Expressive.

CVE-2026-58882HIGH31 out 2026

In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could le

41RISCO

GitHub PoC

Audit statique de l'exposition d'une application Quarkus au décodeur Brotli vulnérable (CVE-2026-111497). Généré avec Claude Code.

CVE-2026-111497CRITICAL31 out 2026

Out-of-Bounds Write in Google Brotli Decoder

70RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.