Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.871exploits catalogados

40.961CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentes populares risco

88.871 exploits

GitHub PoC

YellowKey BitLocker CVE-2026-45585 - free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.

CVE-2026-45585MEDIUM01 ago 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

GitHub PoC

Vulnerability research write-ups — CVE-2026-12478 (libsoup), Apple WebKit, Google VRP

CVE-2026-12478MEDIUM01 ago 2026

Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)

33RISCO

GitHub PoC

Read-only-by-default WordPress incident-response scanner for the “wp2shell” attack chain (CVE-2026-60137 / CVE-2026-63030): detects shadow-admin, database and filesystem IOCs, verifies core integrity, and exports evidence. Optional controlled account cleanup; does not remove malware.

CVE-2026-60137MEDIUMsob ataque01 ago 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

78RISCO

GitHub PoC★ 1

PoC & checker for CVE-2026-15964 - unauthenticated password change in the WordPress plugin Single Sign On For TNG <= 2.0.0 (CVSS 9.8)

CVE-2026-15964CRITICAL01 ago 2026

Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change

48RISCO

GitHub PoC★ 1

Wolf CMS <= 0.8.3.1 - RCE via Arbitrary File Write

CVE-2026-67206HIGH01 ago 2026

Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload

41RISCO

GitHub PoC

MinhHK68/CVE-2026-13158

CVE-2026-13158HIGH01 ago 2026

Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload

41RISCO

GitHub PoC

Kestra Unauthenticated RCE Exploit (CVE-2026-53576)

CVE-2026-53576CRITICAL01 ago 2026

Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

63RISCO

VulnCheck XDB

initial-access

CVE-2026-66066CRITICAL31 jul 2026

Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

75RISCO

VulnCheck XDB

initial-access

CVE-2026-47668CRITICAL31 jul 2026

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

63RISCO

VulnCheck XDB

local

CVE-2021-3156HIGHsob ataque31 jul 2026

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

GitHub PoC★ 4

A Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment "chase" fallback. The CA can be coerced into authenticating back to attacker-controlled infrastructure and then issuing a certificate that impersonates a Domain Controller.

CVE-2026-54121HIGH31 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISCO

GitHub PoC

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2018-13379CRITICALsob ataqueransomware31 jul 2026

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISCO

GitHub PoC★ 2

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2022-40684CRITICALsob ataqueransomware31 jul 2026

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

GitHub PoC★ 2

Unauthenticated Address Book Modification on Sharp MX/BP Multifunction Printers

CVE-2026-63563MEDIUM31 jul 2026

Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication

33RISCO

GitHub PoC

Hunt-Benito/pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351CRITICAL31 jul 2026

pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045)

48RISCO

GitHub PoC

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2022-40684CRITICALsob ataqueransomware31 jul 2026

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

GitHub PoC★ 3

LuZe0y/pd2425-cve-2026-43499-config

CVE-2026-43499HIGH31 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

VulnCheck XDB

initial-access

CVE-2026-61511CRITICAL31 jul 2026

vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php

63RISCO

GitHub PoC★ 4

GhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) — MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation

CVE-2026-43499HIGH31 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC★ 10

GhostLock (CVE-2026-43499) kernel exploit for Poco M6 Pro (emerald) with locked bootloader

CVE-2026-43499HIGH31 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC

Comprehensive technical research on CVE-2026-43284 (Dirty Frag), including Linux kernel internals, root cause analysis, patch analysis, detection engineering, threat hunting, incident response, and Kubernetes security implications.

CVE-2026-43284HIGH31 jul 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

GitHub PoC★ 2

VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)

CVE-2018-13379CRITICALsob ataqueransomware31 jul 2026

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISCO

GitHub PoC★ 1

CVE-2026-54121(CertiGhost) without MachineAccountQuota POC

CVE-2026-54121HIGH31 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISCO

VulnCheck XDB

initial-access

CVE-2026-20896CRITICAL31 jul 2026

Gitea Docker image trusts spoofable reverse-proxy headers by default

63RISCO

GitHub PoC

This is the compiled version. This is not my program though. This is only for directly downloading the compiled version in labs where there is no gcc

CVE-2026-43284HIGH31 jul 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

VulnCheck XDB

initial-access

CVE-2026-16723CRITICAL31 jul 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

48RISCO

VulnCheck XDB

initial-access

CVE-2026-16723CRITICAL31 jul 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

48RISCO

GitHub PoC★ 3

mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool

CVE-2026-64531HIGH31 jul 2026

net: openvswitch: reject oversized nested action attrs

41RISCO

GitHub PoC

CVE-2026-8337 is an Insecure Direct Object Reference (IDOR) vulnerability in Concrete CMS that affects the Survey feature. Unlike CVE-2026-8347 (which involved Express associations), this vulnerability allows an unauthenticated attacker to participate in a restricted/private survey under specific site configurations.

CVE-2026-8337MEDIUM31 jul 2026

Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys when sites are running concurrent public surveys and private surveys

33RISCO

GitHub PoC★ 3

Forensic audit of mcp-remote: seven OAuth trust-boundary advisories, five CVE records (CVE-2026-51994/51995/51996/51997/52001). Server-selected request path (CWE-918) run against loopback canaries in 62 stable releases, 0.1.32 to the current 0.15.1; selected code and namespace signatures under 12 other npm names; search blind spots above 350 KiB.

CVE-2026-51994CRITICAL31 jul 2026

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata

48RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.