Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
84.150exploits catalogados
39.601CVEs com exploração pública
24.695testados em laboratório
TodosReferência 25.629Exploit-DB 24.485GitHub PoC 16.343VulnCheck XDB 9.680Nuclei 4.488Metasploit 3.525✓ só verificadosrecentespopularesrisco
16.153 exploits
GitHub PoC
End-to-end recon and exploitation of a known backdoor (CVE-2010-2075) on Metasploitable2 using Nmap and Metasploit.
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally
60RISCO
abrir ↗GitHub PoC
Drag and Drop File Upload for Elementor Forms - Unauthenticated Arbitrary File Upload to RCE.🔥
Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter
48RISCO
abrir ↗GitHub PoC
Popup for CF7 with Sweet Alert <= 1.6.5 - Cross-Site Request Forgery
WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability
41RISCO
abrir ↗GitHub PoC
Wordpress Plugin ELEX WooCommerce Request a Quote unauthenticated SQL injection POC
ELEX WooCommerce Request a Quote < 2.4.1 - Unauthenticated SQLi via variation_id
41RISCO
abrir ↗GitHub PoC★ 6
CVE-2026-89012 Exploit — SQL filter denylist bypass in Dolibarr via case-insensitive SQL column resolution and case-sensitive denylist matching.
Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameter
41RISCO
abrir ↗GitHub PoC★ 5
SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code in
71RISCO
abrir ↗GitHub PoC★ 1
hakaioffsec/CVE-2026-63642
MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery
33RISCO
abrir ↗GitHub PoC
Saku0512/CVE-2026-72815-poc
go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header
33RISCO
abrir ↗GitHub PoC
CVE-2016-3223 - Draft or TODO
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an
28RISCO
abrir ↗GitHub PoC
ivanesk315/CVE-2026-18963
Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass
63RISCO
abrir ↗GitHub PoC
ivanesk315/CVE-2026-13181-Telerik
RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
41RISCO
abrir ↗GitHub PoC
The MariaDB 13.1.0 RCE LAB is a testing environment designed to validate an exploit chain that combines an OOB Read vulnerability in the share->field pointer array with multiple additional vulnerabilities, ultimately achieving arbitrary code execution with mysql privileges.
MariaDB: insufficient validation of binary frm data when opening a table
41RISCO
abrir ↗GitHub PoC★ 1
Conducted a complete security assessment of an unpatched Windows 7 target ("Blue") to demonstrate the impact of legacy service vulnerabilities in an enterprise environment
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗GitHub PoC★ 1
Mikrotik CVE-2026-86060 Score 9.2 Critical
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
78RISCO
abrir ↗GitHub PoC
vudangducminh/CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗GitHub PoC
ivanesk315/CVE-2026-66066
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
68RISCO
abrir ↗GitHub PoC
ivanesk315/CVE-2026-42533
NGINX Map directive and Regex matching vulnerability
48RISCO
abrir ↗GitHub PoC
hainhc/CVE-2026-73570
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp
100RISCO
abrir ↗GitHub PoC
PrinceAikinsBaidoo/CVE-2022-24637
Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh
60RISCO
abrir ↗GitHub PoC
Might be used to share PoC and findings regarding CVE-2026-73786 in the future
Unauthenticated Network-Based Denial of Service in CPPM systems
41RISCO
abrir ↗GitHub PoC
Jasper2018/CVE-2018-20062
An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP
100RISCO
abrir ↗GitHub PoC
ethicbrudhack/CVE-2008-0166-BTC-satoshi-mining-wallets
OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge
45RISCO
abrir ↗GitHub PoC
ivanesk315/CVE-2026-60137-and-CVE-2026-63030
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
78RISCO
abrir ↗GitHub PoC
ivanesk315/CVE-2026-28496
FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE
63RISCO
abrir ↗GitHub PoC
Walkthrough, threat analysis, and remediation guide for CVE-2017-0144 (EternalBlue).
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗GitHub PoC
Checkov PoC: arbitrary code execution through auto-loaded configuration and unsigned external Python checks.
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
28RISCO
abrir ↗GitHub PoC
ZeroDayVPN/CVE-2026-83991-WriteUP-and-PoC
Windows Cloud Files Mini Filter Driver Tampering Vulnerability
33RISCO
abrir ↗GitHub PoC★ 1
Safely detect Citrix NetScaler SAML auth bypass CVE-2026-19490
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
83RISCO
abrir ↗GitHub PoC
BrainBob/CVE-2026-76578
Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci
48RISCO
abrir ↗GitHub PoC★ 3
SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress; SMS Alert <3.9.6; Unauthenticated Privilege Escalation (Forced Password Reset)
SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset
63RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.