Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.464exploits catalogados

40.695CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentes populares risco

86.991 exploits

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88775. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-88775HIGH23 out 2026

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

41RISCO

GitHub PoC

Hunts, logging and audits for PHP2Shell (CVE-2026-109618, CVE-2026-109619) and CVE-2026-115560. Read-only bash; companion to GarphenGate's defender's field guide.

CVE-2026-109618CRITICALsob ataque23 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC

Hardik007007/CVE-2026-31158-Boolean-Based-SQL-Injection-in-CRM-Login

CVE-2026-31158CRITICAL23 out 2026

SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbit

48RISCO

GitHub PoC

Offline Atlassian Data Center evidence checker for CVE-2026-21589. Self-managed product and version evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-21589CRITICALsob ataque23 out 2026

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

100RISCO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88773. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-88773CRITICAL23 out 2026

HTTP Request Smuggling

63RISCO

GitHub PoC

Offline Sharp / librsvg evidence checker for CVE-2026-96889. Sharp and librsvg version and build evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-96889HIGH23 out 2026

Librsvg: use-after-free when xml includes have duplicated entities

41RISCO

GitHub PoC

Offline Docker CopyEscape evidence checker for CVE-2026-17106. Docker version and build-configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-17106HIGH23 out 2026

Tar extraction in moby/go-archive can write outside the destination directory via link following

41RISCO

GitHub PoC

Scan a filesystem for traces of the compromised eMudhra CA certificates (CVE-2026-111943) and get an upgrade plan

CVE-2026-111943MEDIUM23 out 2026

Distrust compromised intermediate certificates in crypto/x509

33RISCO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-19489. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-19489HIGH23 out 2026

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 thr

41RISCO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-19490. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-19490CRITICALsob ataque23 out 2026

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490

90RISCO

GitHub PoC

CVE-2026-94300: This analysis and PoC were produced substantially with AI assistance ("AI patchwork"). Every code, diff and measurement claim should be verified against the cited sources before being relied upon.

CVE-2026-94300HIGH23 out 2026

Concurrent GSS-TSIG messages corrupt memory

41RISCO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88771. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-88771CRITICALsob ataque23 out 2026

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

100RISCO

GitHub PoC

Offline NetScaler ADC / Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-88772CRITICALsob ataque23 out 2026

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

100RISCO

GitHub PoC

Offline SonicWall SMA1000 evidence checker for CVE-2026-102256. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-102256HIGH23 out 2026

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi

41RISCO

GitHub PoC

Offline Sharp / librsvg evidence checker for CVE-2026-96889. Sharp and librsvg version and build evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-96889HIGH23 out 2026

Librsvg: use-after-free when xml includes have duplicated entities

41RISCO

GitHub PoC

Offline vm2 evidence checker for CVE-2026-92935. Sandbox package and nesting evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-92935CRITICAL23 out 2026

vm2 NodeVM Remote Code Execution via Array-Shaped Require

48RISCO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-105481: HTTP keep-alive premature-response acceptance. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-105481MEDIUM23 out 2026

A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the

33RISCO

GitHub PoC

通达OAV11 PHP5.45.0 补丁包

CVE-2026-109618CRITICALsob ataque23 out 2026

RCE via OOM corruption

100RISCO

GitHub PoC

Offline SonicWall SMA1000 evidence checker for CVE-2026-102255. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-102255CRITICAL23 out 2026

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern

48RISCO

GitHub PoC

Offline SonicWall SMA1000 evidence checker for CVE-2026-102257. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-102257HIGH23 out 2026

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extrac

41RISCO

GitHub PoC★ 2

CVE-2026-107092 is a critical directory traversal vulnerability in NexoPOS v6.2.4 affecting the api/update endpoint, where insufficient input sanitization allows unauthenticated attackers to supply path traversal sequences, escape the intended application directory, and potentially execute arbitrary files or remote code on the underlying server.

CVE-2026-107092CRITICAL23 out 2026

NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.

48RISCO

GitHub PoC

regex2shell (CVE-2026-110264 + family) — GitLab/Onigmo unauth regex RCE research: safe differential detector, deterministic interpreter kill, match-time write primitive

CVE-2026-110264CRITICAL23 out 2026

Integer Overflow or Wraparound in GitLab

48RISCO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-58040: HTTPS Agent TLS session identity-policy bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-58040MEDIUM23 out 2026

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across ident

33RISCO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-56846: HTTP/2 retained header memory exhaustion. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-56846HIGH23 out 2026

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memor

41RISCO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-58042: DNS resolveAny process abort. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-58042MEDIUM23 out 2026

A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Rec

33RISCO

GitHub PoC

Offline Flowise evidence checker for CVE-2026-69254. Flowise version and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-69254CRITICAL23 out 2026

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

48RISCO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-56848: HTTP/2 reentrant send use-after-free. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-56848HIGH23 out 2026

A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_m

41RISCO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-105483: TLS fullwidth-IP hostname validation bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-105483HIGH23 out 2026

A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a con

41RISCO

GitHub PoC

Offline Node.js evidence checker for CVE-2026-106072: TLS noncanonical-IP DNS SAN acceptance. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.

CVE-2026-106072MEDIUM23 out 2026

A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when

33RISCO

GitHub PoC

Guard for PHP 7.4: native Linux package remediation for CVE-2026-109618/109619, with verified build recipes and deployment checks.

CVE-2026-109618CRITICALsob ataque23 out 2026

RCE via OOM corruption

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.