Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
88.871 exploits
GitHub PoC
CVE Reproduction: cve-2025-5777-citrixbleed2_reproduction
CVE-2025-5777CRITICALsob ataqueransomware23 jul 2026
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RISCO
abrir ↗
GitHub PoC★ 1
CVE Reproduction: cve-2026-41940-cpanel_authbypass_reproduction
CVE-2026-41940CRITICALsob ataqueransomware23 jul 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISCO
abrir ↗
GitHub PoC★ 539
Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284
CVE-2026-49881HIGH23 jul 2026
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the
41RISCO
abrir ↗
GitHub PoC
Security analysis and report of CVE-2024-6387 OpenSSH vulnerability, including vulnerability details, CVSS evaluation, and mitigation recommendations.
CVE-2024-6387HIGH23 jul 2026
Openssh: regresshion - race condition in ssh allows rce/dos
63RISCO
abrir ↗
GitHub PoC★ 2
Exploit for CVE-2026-64560, kernelctf-lts-6.12.95
CVE-2026-64560HIGH23 jul 2026
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISCO
abrir ↗
GitHub PoC
CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction
CVE-2025-2783HIGHsob ataque23 jul 2026
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow
71RISCO
abrir ↗
GitHub PoC
Proof-of-concept and offensive security research analyzing CVE-2026-23744 (MCPJam Inspector Unauthenticated RCE, Patched in v1.4.3+).
CVE-2026-23744CRITICAL23 jul 2026
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
abrir ↗
GitHub PoC
theeomega/CVE-2025-32432-POC
CVE-2025-32432CRITICALsob ataque23 jul 2026
Craft CMS Allows Remote Code Execution
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHsob ataqueransomware23 jul 2026
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-4577CRITICALsob ataqueransomware23 jul 2026
Argument Injection in PHP-CGI
100RISCO
abrir ↗
GitHub PoC
CVE-2026-42533 Nginx
CVE-2026-42533CRITICAL23 jul 2026
NGINX Map directive and Regex matching vulnerability
48RISCO
abrir ↗
GitHub PoC
CVE-2026-64600 - Draft - Check todo
CVE-2026-64600HIGH23 jul 2026
xfs: resample the data fork mapping after cycling ILOCK
41RISCO
abrir ↗
GitHub PoC★ 5
CVE-2026-43499 exploit configuration for realme RMX3888 (Android 16) - 20 verified kernel offsets
CVE-2026-43499HIGH23 jul 2026
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISCO
abrir ↗
GitHub PoC★ 4
soralis0912/CVE-2026-43499-aristotle
CVE-2026-43499HIGH23 jul 2026
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISCO
abrir ↗
GitHub PoC★ 5
soralis0912/CVE-2026-43499-aristotle-apk
CVE-2026-43499HIGH23 jul 2026
rtmutex: Use waiter::task instead of current in remove_waiter()
41RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2025-5777CRITICALsob ataqueransomware23 jul 2026
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RISCO
abrir ↗
GitHub PoC★ 1
0xdak/CVE-2026-56121_exploit
CVE-2026-56121CRITICAL23 jul 2026
Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization
48RISCO
abrir ↗
GitHub PoC
CVE-2026-41940 cPanel & WHM Auth Bypass
CVE-2026-41940CRITICALsob ataqueransomware23 jul 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-0012CRITICALsob ataqueransomware23 jul 2026
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
100RISCO
abrir ↗
GitHub PoC★ 1
CVE-2021-41773 Apache
CVE-2021-41773HIGHsob ataqueransomware23 jul 2026
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-23744CRITICAL23 jul 2026
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
abrir ↗
GitHub PoC
CVE Reproduction: cve-2026-0770-langflow_rce_reproduction
CVE-2026-0770CRITICALsob ataque23 jul 2026
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
GitHub Actions workflow sandbox (CVE-2026-48546 reproduction)
CVE-2026-48546HIGH23 jul 2026
KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs
21RISCO
abrir ↗
GitHub PoC
GitHub Actions workflow sandbox for CVE-2026-45132 reproduction
CVE-2026-45132CRITICAL23 jul 2026
CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling
48RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-32432CRITICALsob ataque23 jul 2026
Craft CMS Allows Remote Code Execution
100RISCO
abrir ↗
GitHub PoC★ 28
YellowKey free tool for the CVE-2026-45585 BitLocker bypass vulnerability on Windows 10/11. Covered on Tom's Hardware: extract recovery keys, apply remediation, test bypass mitigation and manage BitLocker encryption state. Download YellowKey
CVE-2026-45585MEDIUM23 jul 2026
Windows BitLocker Security Feature Bypass Vulnerability
33RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2024-43451MEDIUMsob ataque23 jul 2026
NTLM Hash Disclosure Spoofing Vulnerability
85RISCO
abrir ↗
GitHub PoC★ 2
Exploit for CVE-2026-64560, kernelctf-lts-6.12.95
CVE-2026-64560HIGH23 jul 2026
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISCO
abrir ↗
GitHub PoC
CVE Reproduction: cve-2026-63030_60137-wordpress_rce_reproduction
CVE-2026-63030CRITICALsob ataque23 jul 2026
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-33017CRITICALsob ataque23 jul 2026
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
100RISCO
abrir ↗
← anteriorpágina 197 / 2.963próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.