Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.899 exploits
GitHub PoC★ 2
CVE-2026-97229 GitLab CI lint regex integer overflow RCE — InstaBox version matrix reproduction & libruby gadget reverse engineering
Integer Overflow or Wraparound in GitLab
100RISCO
abrir ↗GitHub PoC
rank03031/CVE-2025-49113-CTF
Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the
100RISCO
abrir ↗GitHub PoC
Non-destructive behavioral verifier for the MikroTik RouterOS SSH auth-bypass (CVE-2026-67279 / MikroTrick). Measures server reaction only — no exploit payload.
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
63RISCO
abrir ↗GitHub PoC
SQL Injection via opac_hide / promoted GET parameters in SLiMS 9.8.0 admin bibliography module. CVE-2026-107082.
Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection vi
41RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-64560 temporary-root exploit for realme RMX6699 (Snapdragon 8 Elite, kernel 6.6.118, Android 17/COOS17)
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
41RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-79986 (Apache Camel camel-azure-files): the consumer builds the remote path from the share listing without containment (author-only; see CVE-2026-79983/79984 for the runnable mechanism) — Camel Spring Boot + Camel Quarkus
Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside
41RISCO
abrir ↗VulnCheck XDB
initial-access
Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter
63RISCO
abrir ↗VulnCheck XDB
client-side
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISCO
abrir ↗VulnCheck XDB
initial-access
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4
78RISCO
abrir ↗GitHub PoC★ 1
Reproducer for CVE-2026-79983 (Apache Camel camel-ftp): the consumer builds the remote path from the server's directory listing without containment, escaping the polled directory — Camel Spring Boot + Camel Quarkus
Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside
41RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-78162 (Apache Camel camel-hazelcast): ReplicatedHazelcastAggregationRepository starts a Hazelcast member with no Java deserialization filter — Camel Spring Boot + Camel Quarkus
Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)
48RISCO
abrir ↗GitHub PoC
Security advisory — SQL Injection leading to RCE in Vedo Suite (Bottinelli Informatica). Responsible disclosure.
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary c
48RISCO
abrir ↗GitHub PoC★ 2
Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF (RUSTSEC-2026-0305). Unauthenticated RCE on glibc Linux.
Librsvg: use-after-free when xml includes have duplicated entities
41RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-79984 (Apache Camel camel-mina-sftp): the consumer builds the remote path from the server's SFTP directory listing without containment, escaping the polled directory — Camel Spring Boot + Camel Quarkus
Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside
41RISCO
abrir ↗GitHub PoC
PoC for CVE-2026-59970 Blind SSRF in Tandoor Recipes, CWE-918
Tandoor Recipes: Blind SSRF via AI provider URL (api_base)
41RISCO
abrir ↗GitHub PoC★ 4
CVE-2026-102764 BeyondTrust Remote Support unauthenticated file write / RCE proof of concept
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
100RISCO
abrir ↗GitHub PoC
BIBILZERODAY/CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit
WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
21RISCO
abrir ↗GitHub PoC★ 2
CVE-2026-97229: GitLab RCE Unauthenticated via CI Lint
Integer Overflow or Wraparound in GitLab
100RISCO
abrir ↗GitHub PoC★ 105
CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656
Plex Media Server SSRF
83RISCO
abrir ↗GitHub PoC
CVE-2026-111283 - BMC Helix Network Management Local Administrator Account Accepts Any Password
BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration
48RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-78165 (Apache Camel camel-spring-redis): default JdkSerializationRedisSerializer deserializes Redis PUBLISH payloads with no ObjectInputFilter (RCE) — Camel Spring Boot + Camel Quarkus
Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis Payloads
41RISCO
abrir ↗GitHub PoC
BIBILZERODAY/CVE-2026-104736---Proof-of-Concept-PoC-Exploit-Details
LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter
63RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-78164 (Apache Camel HTTP producers): property placeholders resolved on the message-supplied CamelHttpUri/CamelRestHttpUri headers leak secrets into the outbound request — Camel Spring Boot + Camel Quarkus
Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headers
41RISCO
abrir ↗GitHub PoC★ 8
CVE-2026-89079 — WordPress Theme My Login multisite unauth password overwrite PoC (check, verify, exploit). Not version-only: requires MS + tml_user_passwords.
Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter
63RISCO
abrir ↗GitHub PoC
Reproducer for CVE-2026-79985 (Apache Camel camel-smb): the SMB consumer builds the remote path from the share listing without containment (author-only; see CVE-2026-79983/79984 for the runnable mechanism) — Camel Spring Boot + Camel Quarkus
Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside
41RISCO
abrir ↗GitHub PoC
Wheels SQL injection on MySQL/MariaDB with backslash escaping enabled
Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent)
48RISCO
abrir ↗GitHub PoC
azqzazq1/CVE-2026-110896
WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability
33RISCO
abrir ↗GitHub PoC
Frappe HRMS missing input validation SQL injection vulnerability
Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation
41RISCO
abrir ↗GitHub PoC
Security advisory — Insecure Direct Object Reference (IDOR / BOLA) in Vedo Suite (Bottinelli Informatica). Responsible disclosure.
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the a
41RISCO
abrir ↗GitHub PoC
cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.