Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.899 exploits
GitHub PoC
An isolated-lab study of EternalBlue (MS17-010 / CVE-2017-0144)
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85251 — Apache Camel camel-http credential disclosure on redirect (CWE-200); Spring Boot, affected vs fixed
Apache Camel: Camel-HTTP Credential Disclosure to Cross-Host Redirect Targets
41RISCO
abrir ↗GitHub PoC
PoC For CVE-2026-52856
Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service
41RISCO
abrir ↗GitHub PoC
Cybersecurity assignment on CVE-2024-27198
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISCO
abrir ↗GitHub PoC
CVE-2016-5195 Dirty COW analysis using the Cyber Kill Chain.
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir ↗GitHub PoC
Cybersecurity assignment analysing CVE-2024-3400, its severity, patch, Cyber Kill Chain, and incident response.
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85243 — Apache Camel camel-crypto-pgp integrity verification downgrade (CWE-354); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure
33RISCO
abrir ↗GitHub PoC
Home network security assessment identifying CVE-2017-7494 SambaCry and implementing VLAN segmentation
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-84181 — Apache Camel camel-shiro thread-bound-subject authentication bypass (CWE-287); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse
33RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85250 — Apache Camel camel-xpath XML external entity processing via documentType=InputSource (CWE-611); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Option
41RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85257 — Apache Camel camel-cxf SOAP fault information disclosure (CWE-209); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-CXF Information Disclosure via Unmuted Consumer Exceptions
33RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85246 — Apache Camel camel-mina consumer information disclosure (CWE-209); Spring Boot, affected vs fixed
Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions
33RISCO
abrir ↗GitHub PoC
CVE-2026-16723 reproduction toolkit - fastjson 1.2.83 jar: remote class-loading payload generator (ASM-built POC.class with @JSONType + clinit exec)
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-84180 — Apache Camel camel-knative HTTP consumer information disclosure (CWE-209); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Knative Information Disclosure via Unmuted Consumer Exceptions
33RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85254 — Apache Camel camel-platform-http request-header echo suppression bypass (CWE-178); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Platform-HTTP Request-Header Echo Suppression Bypassed by Header-Name Casing
33RISCO
abrir ↗GitHub PoC
Toluwanimi7/CYB401-CVE-2026-58249-Analysis
Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)
41RISCO
abrir ↗GitHub PoC
shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC
ipv4: validate checksum_start before completing checksum
48RISCO
abrir ↗GitHub PoC★ 23
CVE-2026-64560 staged security research package
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-83531 (Apache Camel camel-dynamic-router): the dynamic-router-control endpoint compiles an attacker-supplied predicate expression/language from the control message (expression-language / code injection) — Camel Spring Boot
Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages
41RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-84176 (Apache Camel camel-platform-http-vertx): CORS handler sends Access-Control-Allow-Credentials: true outside the origin check and reflects the Origin when no origins are configured (credentialed any-origin) — Camel Spring Boot
Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin Reflection
33RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85247 — Apache Camel camel-knative improper certificate validation (CWE-295); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore
33RISCO
abrir ↗GitHub PoC★ 1
A detailed cybersecurity analysis of CVE-2011-2523, a critical backdoor vulnerability associated with a compromised vsftpd 2.3.4 distribution in 2011. This repository explains the vulnerability, its technical mechanism, severity, potential impact, software supply-chain risks, and recommended mitigation strategies for educational purposes.
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
60RISCO
abrir ↗GitHub PoC
Secure REST API with CI security scanning and CVE-2021-41773 reproduction/fix
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC
ydkdk12345-bot/CVE-2024-23897-CTF
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85245 — Apache Camel camel-thrift cross-exchange data disclosure (CWE-488); Spring Boot, affected vs fixed
Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target
33RISCO
abrir ↗GitHub PoC
Research for CYB 401
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISCO
abrir ↗GitHub PoC
CVE-2026-75045 - JetBrains YouTrack unauthenticated database backup download via shared draft signature (CVSS 9.1)
In JetBrains YouTrack before 2025.3.156085,
2026.1.13913,
2026.2.18112 an unauthenticated attacker could download data
48RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-85248 — Apache Camel camel-pqc concurrent Signature race / verification bypass (CWE-362); Spring Boot + Quarkus, affected vs fixed
Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance
33RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.