Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.900exploits catalogados

36.847CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentes populares risco

79.900 exploits

GitHub PoC★ 5

CVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - The first working PoC for linux kernel 7 use after free- by Antonius (sw0rdm4n, w1sdom, ev1lut10n)

CVE-2026-46215HIGH19 jul 2026

drm: Set old handle to NULL before prime swap in change_handle

41RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALsob ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

0xh7ml/CVE-2026-63030

CVE-2026-63030CRITICALsob ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-33017CRITICALsob ataque19 jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISCO

abrir ↗

GitHub PoC★ 10

wp2shell — WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.

CVE-2026-63030CRITICALsob ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALsob ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC★ 17

Yellowkey bitlocker CVE-2026-45585 provides an open-source utility manager to extract, backup, and organize BitLocker recovery keys on Windows drives. Automate volume decryption logs, manage drive encryption states via command-line tools, and export secure configuration files directly to GitHub.

CVE-2026-45585MEDIUM19 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMsob ataque19 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RISCO

abrir ↗

GitHub PoC

CVE-2026-43499-cloudflare-gate签名授权计算

CVE-2026-43499HIGH19 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-33017 exploitation tool for Langflow <1.9.0. Features reverse shells, command execution, file operations, persistence, and automated testing. Validates critical RCE vulnerability impact. For authorized security assessments only.

CVE-2026-33017CRITICALsob ataque19 jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2019-2215HIGHsob ataque19 jul 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMsob ataque19 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALsob ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

Non-intrusive exposure checker for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 / CVE-2026-60137).

CVE-2026-63030CRITICALsob ataque19 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

NESTle19/CVE-2019-2215

CVE-2019-2215HIGHsob ataque19 jul 2026

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMsob ataque19 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RISCO

abrir ↗

GitHub PoC

Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege (CVSS 7.8)

CVE-2026-50402HIGH19 jul 2026

NTFS Elevation of Privilege Vulnerability

41RISCO

abrir ↗

GitHub PoC

vivo X Fold6 (V2545A) GhostLock CVE-2026-43499 临时root/永久解锁研究

CVE-2026-43499HIGH18 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

abrir ↗

GitHub PoC★ 15

Pre-auth RCE PoC for CVE-2026-63030 / CVE-2026-60137 (WordPress core)

CVE-2026-63030CRITICALsob ataque18 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

mrx-arafat/CVE-2026-63030-POC

CVE-2026-63030CRITICALsob ataque18 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

Non-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 + CVE-2026-60137). Detection-only, no exploitation.

CVE-2026-63030CRITICALsob ataque18 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

wp2shell — Pre-authentication RCE in WordPress Core (CVE-2026-60137 + CVE-2026-63030). Chains an SQL injection in author__not_in with batch-route confusion for unauthenticated remote code execution on WP 6.9.0–6.9.4 / 7.0.0–7.0.1.

CVE-2026-60137MEDIUMsob ataque18 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RISCO

abrir ↗

GitHub PoC

Lightweight scanner that detects vulnerable Log4j versions and Log4Shell (CVE-2021-44228) indicators in a filesystem tree.

CVE-2021-44228CRITICALsob ataqueransomware18 jul 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC

CybersecSpirit/CVE-2026-63030

CVE-2026-63030CRITICALsob ataque18 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC★ 6

A fully red-team(offensive security) weaponized variant of wp2shell, built for authorized penetration testing & educational purposes.

CVE-2026-63030CRITICALsob ataque18 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-63030

CVE-2026-63030CRITICALsob ataque18 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMsob ataque18 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMsob ataque18 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-60137MEDIUMsob ataque18 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2026-60137MEDIUMsob ataque18 jul 2026

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.