Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
VulnCheck XDB
initial-access
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISCO
abrir ↗GitHub PoC
A Patch Without Proof: the verification gap behind CVE-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC★ 2
Exploit para explotar la vulnerabilidad CVE-2026-123158 (conocida como sshole).
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISCO
abrir ↗GitHub PoC★ 1
Dream-Rainy/CVE-2026-98260
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗GitHub PoC
CVE-2026-100109 - Security For WooCommerce 1.0.10-1.0.16 unauthenticated admin creation (PoC + exploit by thiscitze)
Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user
48RISCO
abrir ↗VulnCheck XDB
initial-access
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentica
41RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618) upload-progress bug as a minimal Rust/Verus model, with the property that catches it
RCE via OOM corruption
100RISCO
abrir ↗VulnCheck XDB
info-leak
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗GitHub PoC
Lab, privilege-escalation check and detection for LiteLLM CVE-2026-114612 (internal user to proxy admin).
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
48RISCO
abrir ↗VulnCheck XDB
initial-access
Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp
48RISCO
abrir ↗GitHub PoC
Temporary nftables mitigation + installer for CVE-2026-98432 (Ubuntu)
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC
Temporary iptables mitigation for CVE-2026-98432 (CVSS 9.8) on Ubuntu Linux. Filters inbound IPv4 TCP packets containing IP options while awaiting kernel security updates. Not a kernel patch.
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC
Docker config that patches/builds kernel w/ CVE_2026_98432 fix
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗GitHub PoC
charlie-goldenowl/cve-2026-122006-check
The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server
48RISCO
abrir ↗VulnCheck XDB
initial-access
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` a
41RISCO
abrir ↗VulnCheck XDB
initial-access
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISCO
abrir ↗VulnCheck XDB
initial-access
UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc
41RISCO
abrir ↗GitHub PoC
Signed apt repository with patched PHP 5.6-8.2 rebuilds (PHP2Shell CVE-2026-109618/109619) for Ubuntu 18.04 bionic and 20.04 focal
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618) upload-progress bug as a minimal Lean 4 model, with the property that catches it
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2026-102334 nginx proxy manager Exploit
Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection
48RISCO
abrir ↗GitHub PoC
PHP2Shell (CVE-2026-109618) upload-progress bug as a minimal Lean 4 model, without a bug-specific property
RCE via OOM corruption
100RISCO
abrir ↗GitHub PoC★ 2
Root iQOO Z9 Turbo using CVE-2026-98260
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗VulnCheck XDB
initial-access
Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26
63RISCO
abrir ↗VulnCheck XDB
initial-access
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISCO
abrir ↗GitHub PoC
PoC and firmware emulation recipe for CVE-2026-122051 — unauthenticated command injection in the Edimax BR-6208AC /goform/mp handler (firmware ≤ 1.32)
Edimax BR-6208AC mp command injection
48RISCO
abrir ↗GitHub PoC★ 15
CVE-2026-98260 在小米 17 Pro Max 的工程化利用一键 root
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.