Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.526exploits catalogados

36.593CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.152GitHub PoC 15.158VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

15.075 exploits

GitHub PoC

CVE Reproduction: cve-2025-55182-react2shell_reproduction

CVE-2025-55182CRITICALsob ataqueransomware23 jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

abrir ↗

GitHub PoC

CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783HIGHsob ataque23 jul 2026

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

71RISCO

abrir ↗

GitHub PoC★ 5

CVE-2026-43499 exploit configuration for realme RMX3888 (Android 16) - 20 verified kernel offsets

CVE-2026-43499HIGH23 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

abrir ↗

GitHub PoC

Legacy HPE iMC vuln

CVE-2019-5392—23 jul 2026

A disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than ve

23RISCO

abrir ↗

GitHub PoC

CVE Reproduction: cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577CRITICALsob ataqueransomware23 jul 2026

Argument Injection in PHP-CGI

100RISCO

abrir ↗

GitHub PoC★ 28

YellowKey free tool for the CVE-2026-45585 BitLocker bypass vulnerability on Windows 10/11. Covered on Tom's Hardware: extract recovery keys, apply remediation, test bypass mitigation and manage BitLocker encryption state. Download YellowKey

CVE-2026-45585MEDIUM23 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

abrir ↗

GitHub PoC★ 5

soralis0912/CVE-2026-43499-aristotle-apk

CVE-2026-43499HIGH23 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

abrir ↗

GitHub PoC★ 1

CVE Reproduction: cve-2026-41940-cpanel_authbypass_reproduction

CVE-2026-41940CRITICALsob ataqueransomware23 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISCO

abrir ↗

GitHub PoC

0xdak/CVE-2026-63766_exploit

CVE-2026-63766CRITICAL23 jul 2026

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

48RISCO

abrir ↗

GitHub PoC

CVE Reproduction: cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770CRITICALsob ataque23 jul 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

CVE-2026-41940 & CVE-2026-41948 — cPanel & WHM Auth Bypass

CVE-2026-41940CRITICALsob ataqueransomware23 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISCO

abrir ↗

GitHub PoC★ 4

soralis0912/CVE-2026-43499-aristotle

CVE-2026-43499HIGH23 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

abrir ↗

GitHub PoC★ 12

DavidCarliez/CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804HIGH23 jul 2026

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

41RISCO

abrir ↗

GitHub PoC★ 1

CVE-2021-41773 Apache

CVE-2021-41773HIGHsob ataqueransomware23 jul 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

Metabase CVE-2026-59827 Vulnerability Scanner

CVE-2026-59827CRITICAL23 jul 2026

Metabase: Unsafe Deserialization of H2 Query Results

48RISCO

abrir ↗

GitHub PoC

finding by nvth

CVE-2026-59880HIGH23 jul 2026

Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

21RISCO

abrir ↗

GitHub PoC

CVE-2026-64600 - Draft - Check todo

CVE-2026-64600HIGH23 jul 2026

xfs: resample the data fork mapping after cycling ILOCK

41RISCO

abrir ↗

GitHub PoC

CVE-2026-42533 Nginx

CVE-2026-42533CRITICAL23 jul 2026

NGINX Map directive and Regex matching vulnerability

48RISCO

abrir ↗

GitHub PoC

Proof-of-concept and offensive security research analyzing CVE-2026-23744 (MCPJam Inspector Unauthenticated RCE, Patched in v1.4.3+).

CVE-2026-23744CRITICAL23 jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISCO

abrir ↗

GitHub PoC

CVE-2026-58138 - Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator

CVE-2026-58138CRITICAL22 jul 2026

Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

63RISCO

abrir ↗

GitHub PoC★ 17

CVE-2026-43499 PoC Scanner

CVE-2026-43499HIGH22 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

abrir ↗

GitHub PoC

Scan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across multiple sites with severity classification and CSV reporting.

CVE-2026-63030CRITICALsob ataque22 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

PoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exception's full stack trace is returned to the client (CWE-209). Fixed in 4.14.8/4.18.3/4.21.0.

CVE-2026-56139MEDIUM22 jul 2026

Apache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients

33RISCO

abrir ↗

GitHub PoC★ 1

Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.

CVE-2026-41089CRITICAL22 jul 2026

Windows Netlogon Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC

PoC reproducer for CVE-2026-55993 (Apache Camel camel-atmosphere-websocket): the WebSocket consumer copies connection query parameters onto the Exchange unfiltered, so an injected CamelHttpUri drives a server-side request (SSRF) and leaks resolved property placeholders. Fixed in 4.14.8/4.18.3/4.21.0.

CVE-2026-55993HIGH22 jul 2026

Apache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling influencing internal behaviour

41RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-16540 — Simply Schedule Appointments < 1.6.12.6 Unauthenticated Appointment Data Disclosure and Mass Deletion

CVE-2026-16540HIGH22 jul 2026

Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint

41RISCO

abrir ↗

GitHub PoC★ 21

CVE-2026-64600

CVE-2026-64600HIGH22 jul 2026

xfs: resample the data fork mapping after cycling ILOCK

41RISCO

abrir ↗

GitHub PoC★ 12

CVE-2026-46331 and CVE-2026-43503

CVE-2026-46331HIGH22 jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RISCO

abrir ↗

GitHub PoC

This repository documents the process of identifying, analyzing, and gathering Open Source Intelligence (OSINT) on a specific security vulnerability detected during a target network scan.

CVE-2012-1823CRITICALsob ataque22 jul 2026

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RISCO

abrir ↗

GitHub PoC

CVE-2026-50522

CVE-2026-50522CRITICALsob ataque22 jul 2026

Microsoft SharePoint Remote Code Execution Vulnerability

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.