Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.899 exploits
GitHub PoC★ 1
cve-2026-62911-exploit
Microsoft Exchange Server Elevation of Privilege Vulnerability
41RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85312 — Apache Camel camel-core saga hijacking via the Long-Running-Action header (CWE-20). Camel Spring Boot + Camel Quarkus.
Apache Camel: Camel-Core Saga Participation Hijacking via the Unfiltered Long-Running-Action Header
33RISCO
abrir ↗GitHub PoC
unauthenticated order cancellation in TYPO3 EXT:shop
Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
33RISCO
abrir ↗GitHub PoC
CVE-2026-99999 Educational Analysis — attack chain simulation of Linux kernel csum_start bug (CVSS 9.3). See also: CVE-2026-99999-exploit (Working PoC).
ipv4: validate checksum_start before completing checksum
48RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-106173
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5
48RISCO
abrir ↗GitHub PoC
Exploit and writeup for CVE-2026-87690
Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution
41RISCO
abrir ↗GitHub PoC
Research attribution and coordinated disclosure status for CVE-2026-105484.
TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection
48RISCO
abrir ↗GitHub PoC
Working, stdlib-only PoC. A low-privileged authenticated user stores a shell palistener
Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)
63RISCO
abrir ↗GitHub PoC
Fork optimizado de Bytebot: Agente de IA para control de escritorio. Reducido de 7GB a 1.09GB, parcheada CVE-2026-78250, con documentación viva (Obsidian) y protocolo de trabajo Human-in-the-loop.
bytebot-ai bytebot Agent Execution Workflow infinite loop
33RISCO
abrir ↗GitHub PoC
OFRPurpose/poc-cve-2026-64638
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISCO
abrir ↗GitHub PoC
forgeable PayPal payment callback in TYPO3 EXT:shop
Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
33RISCO
abrir ↗GitHub PoC★ 5
OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + KernelSU / KernelSU Next / BakaSU / SukiSU Ultra LKM
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-64638 | WordPress < 7.0.3 Pre-Auth Stored XSS → RCE
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
Via a specially crafted malici
56RISCO
abrir ↗GitHub PoC★ 1
Checks whether a Linux system is affected by CVE-2026-99999 (PwnEscape) and prints or applies the distribution-specific kernel fix
ipv4: validate checksum_start before completing checksum
48RISCO
abrir ↗GitHub PoC★ 1
Proof of Concept for CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS
76RISCO
abrir ↗GitHub PoC
利用CVE-2019-2215给小米5获取临时root（比较通用？）
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
abrir ↗GitHub PoC
Work 1 — secure Flask REST API with CI/CD (bandit, pip-audit) and a CVE-2021-41773 analysis
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗VulnCheck XDB
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85300 — Apache Camel camel-pqc private key written with permissive file permissions (CWE-276); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-PQC Private Key Disclosure via Key Material Written with Default File Permissions
33RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-106173
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5
48RISCO
abrir ↗GitHub PoC
CVE-2026-99999 Working PoC — real VM escape for Linux kernel csum_start bug (CVSS 9.3). Guest-to-Host heap leak. See also: CVE-2026-99999-analysis (Educational).
ipv4: validate checksum_start before completing checksum
48RISCO
abrir ↗GitHub PoC
Secure REST API with CI/CD and CVE-2021-41773 analysis
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC
Log4Shell (CVE-2021-44228) audit findings and Actions smoke-test workflow
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗GitHub PoC
Log4Shell (CVE-2021-44228) remediation paperwork and log4j-core advisory audit for the payments service
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-84181 — Apache Camel camel-shiro thread-bound-subject authentication bypass (CWE-287); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse
33RISCO
abrir ↗GitHub PoC
CVE-2016-5195 Dirty COW analysis using the Cyber Kill Chain.
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir ↗GitHub PoC
Cybersecurity assignment on CVE-2024-27198
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISCO
abrir ↗GitHub PoC
ydkdk12345-bot/CVE-2024-23897-CTF
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.