Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.899 exploits
GitHub PoC
Toluwanimi7/CYB401-CVE-2026-58249-Analysis
Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)
41RISCO
abrir ↗GitHub PoC
shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC
ipv4: validate checksum_start before completing checksum
48RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-83531 (Apache Camel camel-dynamic-router): the dynamic-router-control endpoint compiles an attacker-supplied predicate expression/language from the control message (expression-language / code injection) — Camel Spring Boot
Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages
41RISCO
abrir ↗GitHub PoC★ 2
kpatch livepatch build and load test for CVE-2026-99999 on Rocky Linux 8.10 (4.18.0-553.144.1.el8_10)
ipv4: validate checksum_start before completing checksum
48RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-99999 (PwnEscape) reproduction: IPv4 csum_start validation bug — IHL rewrite and 32-byte kernel heap disclosure
ipv4: validate checksum_start before completing checksum
48RISCO
abrir ↗VulnCheck XDB
initial-access
Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter
63RISCO
abrir ↗GitHub PoC★ 23
CVE-2026-64560 staged security research package
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISCO
abrir ↗VulnCheck XDB
initial-access
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
85RISCO
abrir ↗VulnCheck XDB
local
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all
76RISCO
abrir ↗GitHub PoC
alvaroguzmancode/CVE-2026-99999
ipv4: validate checksum_start before completing checksum
48RISCO
abrir ↗GitHub PoC
CVE-2026-16723 reproduction toolkit - fastjson 1.2.83 jar: remote class-loading payload generator (ASM-built POC.class with @JSONType + clinit exec)
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISCO
abrir ↗VulnCheck XDB
info-leak
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗VulnCheck XDB
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗GitHub PoC
Cyber Security Assignment analyzing CVE-2024-6387, its severity, patch and etc
Openssh: regresshion - race condition in ssh allows rce/dos
63RISCO
abrir ↗GitHub PoC
wonnnggge/CVE-2024-27198_CTF
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISCO
abrir ↗GitHub PoC
ydkdk12345-bot/CVE-2024-23897-CTF
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-84176 (Apache Camel camel-platform-http-vertx): CORS handler sends Access-Control-Allow-Credentials: true outside the origin check and reflects the Origin when no origins are configured (credentialed any-origin) — Camel Spring Boot
Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection
33RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85245 — Apache Camel camel-thrift cross-exchange data disclosure (CWE-488); Spring Boot, affected vs fixed
Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target
33RISCO
abrir ↗GitHub PoC
Home network security assessment identifying CVE-2017-7494 SambaCry and implementing VLAN segmentation
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo
100RISCO
abrir ↗GitHub PoC
Log4Shell (CVE-2021-44228) remediation paperwork and log4j-core advisory audit for the payments service
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.