Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.464exploits catalogados

40.695CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentes populares risco

87.464 exploits

GitHub PoC★ 2

Offline Brotli / HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.

CVE-2026-111497CRITICAL26 out 2026

Out-of-Bounds Write in Google Brotli Decoder

70RISCO

GitHub PoC

PoC / exploit archive for CVE-2026-109618

CVE-2026-109618CRITICALsob ataque26 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC★ 6

Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。

CVE-2026-98260HIGH26 out 2026

exec: Cleanup POSIX timers right after de_thread()

41RISCO

VulnCheck XDB

local

CVE-2021-3560HIGHsob ataque26 out 2026

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISCO

GitHub PoC★ 1

CVE-2026-109618-109619 PHP2shell

CVE-2026-109618CRITICALsob ataque26 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC★ 1

Offline Brotli / HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.

CVE-2026-111497CRITICAL26 out 2026

Out-of-Bounds Write in Google Brotli Decoder

70RISCO

GitHub PoC★ 1

Unauthenticated RCE in PHP via session.upload_progress use-after-free (CVE-2026-109618 / CVE-2026-109619)

CVE-2026-109618CRITICALsob ataque26 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC★ 3

Check whether a website is affected by PHP2Shell (CVE-2026-109618 / CVE-2026-109619)

CVE-2026-109618CRITICALsob ataque26 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC

CVE-2026-90931: LaraDashboard stored XSS via SVG upload — bilingual analysis and safe PoC

CVE-2026-90931MEDIUM26 out 2026

LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload

33RISCO

GitHub PoC★ 1

CVE-2026-90932: LaraDashboard path traversal to arbitrary file deletion/write — bilingual analysis and safe PoC

CVE-2026-90932HIGH26 out 2026

LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

41RISCO

GitHub PoC★ 1

CVE-2026-101767-POC

CVE-2026-101767CRITICAL26 out 2026

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported

48RISCO

GitHub PoC

CVE-2026-101767

CVE-2026-101767CRITICAL26 out 2026

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported

48RISCO

GitHub PoC

En este repositorio voy subir la explotacion de la vulnerablildad CVE-2017-0143 con el exploit eternalblue.

CVE-2017-0143HIGHsob ataqueransomware26 out 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

VulnCheck XDB

info-leak

CVE-2017-1000028—26 out 2026

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RISCO

VulnCheck XDB

denial-of-service

CVE-2026-111497CRITICAL26 out 2026

Out-of-Bounds Write in Google Brotli Decoder

70RISCO

VulnCheck XDB

denial-of-service

CVE-2026-111497CRITICAL26 out 2026

Out-of-Bounds Write in Google Brotli Decoder

70RISCO

VulnCheck XDB

initial-access

CVE-2024-45409CRITICAL26 out 2026

The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector

53RISCO

VulnCheck XDB

info-leak

CVE-2021-48015HIGH26 out 2026

JeeWMS Path Traversal via showOrDownByurl.do

41RISCO

VulnCheck XDB

initial-access

CVE-2025-3987MEDIUM26 out 2026

TOTOLINK N150RT formWsc command injection

38RISCO

VulnCheck XDB

denial-of-service

CVE-2026-111497CRITICAL26 out 2026

Out-of-Bounds Write in Google Brotli Decoder

70RISCO

VulnCheck XDB

denial-of-service

CVE-2026-111497CRITICAL26 out 2026

Out-of-Bounds Write in Google Brotli Decoder

70RISCO

VulnCheck XDB

info-leak

CVE-2024-58396HIGH26 out 2026

YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileId

41RISCO

GitHub PoC

CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source / Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test

CVE-2026-75650CRITICALsob ataque26 out 2026

Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

100RISCO

VulnCheck XDB

denial-of-service

CVE-2026-109618CRITICALsob ataque26 out 2026

RCE via OOM corruption

100RISCO

VulnCheck XDB

initial-access

CVE-2026-109618CRITICALsob ataque26 out 2026

RCE via OOM corruption

100RISCO

VulnCheck XDB

initial-access

CVE-2026-109618CRITICALsob ataque26 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC

CVE-2026-97229 an external exploit for GitLab CI lint regex RCE. It is used only against a live GitLab target with permission. It creates a project, pushes a malicious CI configuration, triggers the CI lint endpoint, and receives command output through an HTTP callback. This is for authorized security research only.

CVE-2026-97229CRITICALsob ataque26 out 2026

Integer Overflow or Wraparound in GitLab

100RISCO

GitHub PoC

Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143

CVE-2017-0143HIGHsob ataqueransomware26 out 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

GitHub PoC

Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143

CVE-2017-0143HIGHsob ataqueransomware26 out 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

GitHub PoC

Local reproduction lab for PHP2Shell (CVE-2026-109618 / CVE-2026-109619): PHP 8.5.11 source-built mod_php target, chunked OOM trigger harness, findings + mitigations. Loopback only.

CVE-2026-109618CRITICALsob ataque26 out 2026

RCE via OOM corruption

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.