Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
87.463 exploits
GitHub PoC
saretawa/CVE-2026-86583
CVE-2026-86583HIGH04 nov 2026
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields
41RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-109619CRITICALsob ataque04 nov 2026
RCE via stale global state
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-32433CRITICALsob ataque04 nov 2026
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
abrir ↗
GitHub PoC★ 1
CVE-2026-98260 adb runner with Termux one-tap root
CVE-2026-98260HIGH04 nov 2026
exec: Cleanup POSIX timers right after de_thread()
41RISCO
abrir ↗
GitHub PoC
Script that applies the Ubuntu-published nftables mitigation for CVE-2026-98432 (Linux kernel IPv4 TCP use-after-free).
CVE-2026-98432CRITICAL04 nov 2026
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗
GitHub PoC
Certbn/CVE-2026-97229-GitLab-CI-CD
CVE-2026-97229CRITICALsob ataque04 nov 2026
Integer Overflow or Wraparound in GitLab
100RISCO
abrir ↗
GitHub PoC
CVE-2026-97798
CVE-2026-97798HIGH04 nov 2026
Windows Error Reporting Service Elevation of Privilege Vulnerability
41RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-109619CRITICALsob ataque04 nov 2026
RCE via stale global state
100RISCO
abrir ↗
GitHub PoC
Certbn/CVE-2026-98432-Linux-IPv4-TCP-IP-Use-After-Free
CVE-2026-98432CRITICAL04 nov 2026
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗
GitHub PoC
Python-based PoC for CVE-2026-98432, probing anomalous IPv4 TCP option behavior associated with a Linux kernel use-after-free race condition.
CVE-2026-98432CRITICAL04 nov 2026
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-109618CRITICALsob ataque04 nov 2026
RCE via OOM corruption
100RISCO
abrir ↗
GitHub PoC
t0ge-kun/CVE-2026-98432-check
CVE-2026-98432CRITICAL04 nov 2026
ipv4: free inet_opt and ireq_opt after an RCU grace period
48RISCO
abrir ↗
GitHub PoC
Read-only audit for CVE-2026-109518: APT HTTP backend hard-link reuse lets an on-path attacker swap a verified package (Debian/Ubuntu)
CVE-2026-109518HIGH04 nov 2026
APT RCE via hard link reuse
41RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-1623MEDIUM04 nov 2026
Totolink A7000R cstecgi.cgi setUpgradeFW command injection
33RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-59774CRITICAL04 nov 2026
Gitea Org-mode file disclosure and code execution
68RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-58115CRITICAL04 nov 2026
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running In
48RISCO
abrir ↗
GitHub PoC★ 2
php2shell (CVE-2026-109618 / CVE-2026-109619) — deliberately vulnerable PHP 8.4.26 lab with a patched 8.4.27 control and a working proof-of-concept that lands a shell as www-data.
CVE-2026-109618CRITICALsob ataque04 nov 2026
RCE via OOM corruption
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-109619CRITICALsob ataque04 nov 2026
RCE via stale global state
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-109619CRITICALsob ataque04 nov 2026
RCE via stale global state
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2026-86596CRITICAL04 nov 2026
s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter
48RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-119977HIGHsob ataque04 nov 2026
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
71RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-26360HIGHsob ataque04 nov 2026
Adobe ColdFusion Improper Access Control Arbitrary code execution
100RISCO
abrir ↗
GitHub PoC
Säkerhetsvägledning för GIS-miljöer om Broccoli2Shell (CVE-2026-111497).
CVE-2026-111497CRITICAL04 nov 2026
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗
GitHub PoC
sam00/Node2Shell-CVE-2026-111497-POC
CVE-2026-111497CRITICAL04 nov 2026
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗
GitHub PoC
Read-only scanner for Node2Shell / CVE-2026-111497
CVE-2026-111497CRITICAL04 nov 2026
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2017-7921CRITICALsob ataque04 nov 2026
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗
GitHub PoC
Research writeup: php2shell (CVE-2026-109618/109619) vs the Cloudflare PHP CTF — complete local chain, WAF lock analysis, original findings
CVE-2026-109618CRITICALsob ataque04 nov 2026
RCE via OOM corruption
100RISCO
abrir ↗
GitHub PoC
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) 분석과 패치 기준 확인 예제
CVE-2026-109618CRITICALsob ataque04 nov 2026
RCE via OOM corruption
100RISCO
abrir ↗
GitHub PoC
High-level notes for CVE-2026-109618 in PHP mod_php. Exploit code is not included.
CVE-2026-109618CRITICALsob ataque04 nov 2026
RCE via OOM corruption
100RISCO
abrir ↗
GitHub PoC
Unauthenticated RCE exploit for PHP-FPM 8.4.26 via php2shell (CVE-2026-109618 / CVE-2026-109619) - phpMyAdmin 5.2.3, pure-HTTP PoC, defeats ASLR in-band.
CVE-2026-109618CRITICALsob ataque04 nov 2026
RCE via OOM corruption
100RISCO
abrir ↗
← anteriorpágina 7 / 2.916próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.