Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

14.991 exploits

GitHub PoC★ 11

proof-of-concept scripts for 2 unauthenticated RCEs in Samba (CVE-2026-4408 & CVE-2026-4480) and local privilege escalation in TelnetD (CVE-2026-28372)

CVE-2026-4408CRITICAL03 ago 2026

Samba: remote code execution in samr

48RISCO

GitHub PoC

sam00/POC-CVE-2026-54121-Certighost

CVE-2026-54121HIGH03 ago 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISCO

GitHub PoC

George0Papasotiriou/CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection

CVE-2026-9997HIGH03 ago 2026

Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rende

41RISCO

GitHub PoC★ 2

CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing

CVE-2026-66066CRITICAL03 ago 2026

Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

68RISCO

GitHub PoC

fastjson vulnerability scanner - detect fastjson in JARs and Spring Boot fat-JARs, check exposure to CVE-2026-16723, and verify whether you already run the official patch 1.2.84. Zero-dependency offline CLI. fastjson 漏洞检测与排查工具：一条命令扫描依赖，支持 fat-JAR 与 shaded 依赖，并判定是否已升到官方补丁版本 1.2.84。

CVE-2026-16723CRITICAL03 ago 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

53RISCO

GitHub PoC

Code injection (RCE) in datamodel-code-generator via unvalidated customBasePath (CVE-2026-63720)

CVE-2026-63720HIGH03 ago 2026

datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

41RISCO

GitHub PoC

siboy17/CVE-2022-21907-http.sys

CVE-2022-21907CRITICAL03 ago 2026

HTTP Protocol Stack Remote Code Execution Vulnerability

70RISCO

GitHub PoC

George0Papasotiriou/CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666MEDIUM03 ago 2026

PgBouncer crash in kill_pool_logins_server_error

33RISCO

GitHub PoC

CVE-2026-52887 — NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker lab.

CVE-2026-52887CRITICAL03 ago 2026

NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE

48RISCO

GitHub PoC★ 7

CVE-2026-64531 (OVSwrap) PoC - Linux kernel Open vSwitch LPE; for patch validation and security research

CVE-2026-64531HIGH03 ago 2026

net: openvswitch: reject oversized nested action attrs

41RISCO

GitHub PoC★ 1

Bu laboratuvar ortamını sıfırdan kendim oluşturdum. Next.js uygulaması içerisinde giriş, ana sayfa ve admin sayfalarını hazırladım. Middleware ile yetkilendirme mekanizmasını kurduktan sonra Burp Suite kullanarak CVE-2025-29927 zafiyetini kontrollü ortamda gösterdim.

CVE-2025-29927CRITICAL03 ago 2026

Authorization Bypass in Next.js Middleware

85RISCO

GitHub PoC★ 17

CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)

CVE-2026-60004CRITICAL03 ago 2026

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

85RISCO

GitHub PoC★ 1

CY376 Blue Team project — pfSense DMZ, Suricata IDS/IPS, and automated host hardening against CVE-2014-6271

CVE-2014-6271CRITICALsob ataque03 ago 2026

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

GitHub PoC★ 3

Proof-of-Concept exploit for CVE-2026-15409 (SonicWall SMA 1000 RCE) via Erlang distribution over WebSocket. Achieves unauthenticated remote code execution as couchdb user.

CVE-2026-15409CRITICALsob ataqueransomware03 ago 2026

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

100RISCO

GitHub PoC★ 2

CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing

CVE-2026-16232CRITICALsob ataque03 ago 2026

Authentication Bypass in the SmartConsole Login Process Using an Application Token

100RISCO

GitHub PoC

CVE-2026-17583 - Draft

CVE-2026-17583HIGH03 ago 2026

Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check

41RISCO

GitHub PoC

Path traversal (Tar Slip) in Cornac via _extract_archive (CVE-2026-43637)

CVE-2026-43637HIGH03 ago 2026

Cornac < 2.6.0 Path Traversal via _extract_archive() in download.py

41RISCO

GitHub PoC

Manage BitLocker recovery keys, unlock encrypted drives, and monitor encryption status with this lightweight Windows utility.

CVE-2026-45585MEDIUM03 ago 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

GitHub PoC★ 2

GhostLock (CVE-2026-43499) kernel exploit port for REDMI K90 Pro Max Taiwan firmware (myron, WPMTWXM) — offsets, build guide, prebuilt binary

CVE-2026-43499HIGH03 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC

CVE-2026-46243

CVE-2026-46243HIGH03 ago 2026

smb: client: reject userspace cifs.spnego descriptions

41RISCO

GitHub PoC★ 1

0xdak/CVE-2026-68771_exploit

CVE-2026-68771CRITICAL03 ago 2026

ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization

48RISCO

GitHub PoC

CVE-2026-9848 is an Unauthenticated SQL Injection (SQLi) vulnerability affecting the WP Ticket (Customer Support Ticket System & Helpdesk) plugin for WordPress up to and including version 6.0.4.

CVE-2026-9848HIGH03 ago 2026

WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

41RISCO

GitHub PoC

George0Papasotiriou/CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090CRITICAL03 ago 2026

CVE-2026-9090

48RISCO

GitHub PoC

Unauthenticated arbitrary file read in Flowise (< 2.2.4) via path traversal in getFileFromStorage (storageUtils.ts). Caused by un-sanitized file path combined with mass-assignment in PUT /api/v1/document-store/store/:id. Allows full compromise via /root/.flowise/encryption.key read. Distinct from CVE-2025-71338 (fixed in 2.2.4).

CVE-2025-71338CRITICAL03 ago 2026

Flowise - Arbitrary File Write to Remote Code Execution via document-store API

48RISCO

GitHub PoC★ 50

villager1314/CVE-2026-64560-Analysis

CVE-2026-64560HIGH03 ago 2026

posix-cpu-timers: Prevent UAF caused by non-leader exec() race

41RISCO

GitHub PoC

OXDEV-77637 repro fixture: uv workspace whose transitive CVE (starlette 0.25.0 / CVE-2026-48710) is dropped when the lean clone omits workspace-member pyproject.toml. Tag: repro-OXDEV-77637

CVE-2026-48710MEDIUM03 ago 2026

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

48RISCO

GitHub PoC

sam00/POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826CRITICAL03 ago 2026

Azure DevOps Information Disclosure Vulnerability

48RISCO

GitHub PoC★ 2

CVE-2026-16232 (Check Point SmartConsole authentication bypass) PoC - unauth to admin; for authorized security testing

CVE-2026-16232CRITICALsob ataque03 ago 2026

Authentication Bypass in the SmartConsole Login Process Using an Application Token

100RISCO

GitHub PoC★ 2

CVE-2026-64531 (OVSwrap) PoC - Linux kernel Open vSwitch LPE; for patch validation and security research

CVE-2026-64531HIGH03 ago 2026

net: openvswitch: reject oversized nested action attrs

41RISCO

GitHub PoC

George0Papasotiriou/CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080MEDIUM03 ago 2026

MISP core - Stored XSS in MISP template (old engine) element attribute type

33RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.