Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.013exploits catalogados

41.057CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentes populares risco

89.013 exploits

GitHub PoC

A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305.

CVE-2026-10187CRITICAL03 jun 2026

Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow

48RISCO

abrir ↗

GitHub PoC★ 1

Add go CVE-2026-46300 (Fragnesia) local privilege escalation exploit

CVE-2026-46300HIGHsob ataque03 jun 2026

net: skbuff: preserve shared-frag marker during coalescing

91RISCO

abrir ↗

GitHub PoC

leehunkoo/hk_CVE-2025-32433

CVE-2025-32433CRITICALsob ataque03 jun 2026

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC

CVE-2026-27145 - Draft

CVE-2026-27145MEDIUM03 jun 2026

Inefficient candidate hostname parsing in crypto/x509

33RISCO

abrir ↗

GitHub PoC

DanieleGiovanardi2408/cve-2024-36401-geoserver-rce

CVE-2024-36401CRITICALsob ataque03 jun 2026

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISCO

abrir ↗

GitHub PoC★ 1

Rocket.Chat OAuth2 NoSQL Injection

CVE-2026-29198CRITICAL03 jun 2026

In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability c

48RISCO

abrir ↗

GitHub PoC★ 13

CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overflow. The binary-verified analysis the public PoCs got wrong.

CVE-2026-41089CRITICAL03 jun 2026

Windows Netlogon Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 2

Shcesama/cve-2023-4863-analysis

CVE-2023-4863HIGHsob ataque03 jun 2026

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

GitHub PoC★ 6

PoC de CVE-2026-49975 (HTTP/2 Bomb): DoS remoto contra servidores web con HTTP/2 por defecto.

CVE-2026-49975HIGH03 jun 2026

Apache HTTP Server: mod_http2 denial of service

53RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque03 jun 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-41089CRITICAL03 jun 2026

Windows Netlogon Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC

PoC exploit for CVE-2026-23744 — unauthenticated RCE in MCPJam Inspector via unvalidated serverConfig command injection on /api/mcp/connect, enabling reverse shell as process owner without credentials.

CVE-2026-23744CRITICAL03 jun 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISCO

abrir ↗

GitHub PoC★ 3

Palo Alto Networks PAN-OS contains an authentication bypass caused by flaws in the GlobalProtect portal and gateway, letting attackers establish unauthorized VPN connections, exploit requires network access to the portal or gateway.

CVE-2026-0257HIGHsob ataqueransomware03 jun 2026

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

100RISCO

abrir ↗

GitHub PoC

PoC of CVE-2026-49943

CVE-2026-49943MEDIUM03 jun 2026

CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matchi

33RISCO

abrir ↗

GitHub PoC★ 1

Add go CVE-2026-43284 / CVE-2026-43500 (dirtyfrag) local privilege escalation exploit

CVE-2026-43284HIGH03 jun 2026

xfrm: esp: avoid in-place decrypt on shared skb frags

78RISCO

abrir ↗

GitHub PoC

Public advisory & PoC for CVE-2026-26897 — Deep Link Bypass in EcoOnline EHS Android (com.airsweb.v10), fixed in 0.2.500

CVE-2026-26897CRITICAL03 jun 2026

An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain

48RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2024-36401CRITICALsob ataque03 jun 2026

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-9256 Nginx heap buffer overflow POC

CVE-2026-9256CRITICAL03 jun 2026

NGINX ngx_http_rewrite_module vulnerability

53RISCO

abrir ↗

GitHub PoC

这是一个用于防御巡检的 CVE-2026-41089 检测脚本。该漏洞是 Microsoft 在 2026 年 5 月安全更新中披露的 Windows Netlogon 远程代码执行漏洞。

CVE-2026-41089CRITICAL03 jun 2026

Windows Netlogon Remote Code Execution Vulnerability

70RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-46300HIGHsob ataque03 jun 2026

net: skbuff: preserve shared-frag marker during coalescing

91RISCO

abrir ↗

GitHub PoC

Spring Boot app with log4j 2.14.1 (CVE-2021-44228) — VulnFix agent test target

CVE-2021-44228CRITICALsob ataqueransomware03 jun 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC★ 3

Bulk scanning + one-click vulnerability exploitation

CVE-2026-42945CRITICAL03 jun 2026

NGINX ngx_http_rewrite_module vulnerability

60RISCO

abrir ↗

GitHub PoC★ 1

Saku0512/CVE-2026-54088-poc

CVE-2026-54088CRITICAL03 jun 2026

File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

48RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2026-7465HIGH03 jun 2026

Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

41RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-43494HIGH03 jun 2026

net/rds: reset op_nents when zerocopy page pin fails

41RISCO

abrir ↗

VulnCheck XDB

local

CVE-2026-31431HIGHsob ataque03 jun 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC

Detection script for CIFSwitch - CVE-2026-46243

CVE-2026-46243HIGH03 jun 2026

smb: client: reject userspace cifs.spnego descriptions

41RISCO

abrir ↗

GitHub PoC★ 14

CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。

CVE-2026-41089CRITICAL03 jun 2026

Windows Netlogon Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 1

go CVE-2026-31431 (CopyFail) local privilege escalation exploit

CVE-2026-31431HIGHsob ataque03 jun 2026

crypto: algif_aead - Revert to operating out-of-place

100RISCO

abrir ↗

GitHub PoC★ 48

CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM

CVE-2026-50343HIGH03 jun 2026

Microsoft Install Service Elevation of Privilege Vulnerability

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.