Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

14.991 exploits

GitHub PoC

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values (rouille)

CVE-2026-66746MEDIUM26 jul 2026

Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection

33RISCO

abrir ↗

GitHub PoC★ 3

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logging, proxy support, JSON reporting, and post-exploitation account enumeration. For authorized security testing only.

CVE-2026-41940CRITICALsob ataqueransomware26 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISCO

abrir ↗

GitHub PoC

Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values (tiny_http)

CVE-2026-66752MEDIUM26 jul 2026

tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

33RISCO

abrir ↗

GitHub PoC★ 1

PoC for CVE-2026-65694 — Microweber CMS (<=2.0.20) unauthenticated path traversal → arbitrary file read (.env / secrets)

CVE-2026-65694HIGH25 jul 2026

Microweber CMS 2.0.20 Path Traversal via ServeStaticFileController

56RISCO

abrir ↗

GitHub PoC★ 1

CVE-2026-16723

CVE-2026-16723CRITICAL25 jul 2026

Remote Code Execution in fastjson 1.2.68–1.2.83

53RISCO

abrir ↗

GitHub PoC

Technical analysis and Proof-of-Concept for CVE-2026-60206, a critical Oracle WebLogic Server SAML authentication bypass vulnerability.

CVE-2026-60206CRITICAL25 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RISCO

abrir ↗

GitHub PoC★ 40

CVE-2026-50522 PoC

CVE-2026-50522CRITICALsob ataque25 jul 2026

Microsoft SharePoint Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 17

（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.

CVE-2026-43499HIGH25 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

abrir ↗

GitHub PoC★ 5

CVE-2026-43499 per-boot root exploit — core logic (arm64 Android GKI 6.6)

CVE-2026-43499HIGH25 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

abrir ↗

GitHub PoC

Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.

CVE-2026-45585MEDIUM25 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

abrir ↗

GitHub PoC

CVE-2026-54121 - Draft

CVE-2026-54121HIGH25 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISCO

abrir ↗

GitHub PoC★ 1

CypherHippie/CVE-2026-66804

CVE-2026-66804HIGH25 jul 2026

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

41RISCO

abrir ↗

GitHub PoC★ 2

7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap

CVE-2026-14266HIGH25 jul 2026

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

41RISCO

abrir ↗

GitHub PoC

CVE-2026-12960 - Improper Export of Android Application Components in the ASUS Router app (com.asus.aihome). PoC, exploit APK, video, and vendor report. Fixed in 1.0.0.9.74.

CVE-2026-12960MEDIUM25 jul 2026

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application o

33RISCO

abrir ↗

GitHub PoC

CVE-2026-61946: Unauthenticated IDOR in Easy Appointments <= 3.12.27

CVE-2026-61946MEDIUM25 jul 2026

WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability

33RISCO

abrir ↗

GitHub PoC

Manage BitLocker encrypted drives on Windows 10 and 11. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.

CVE-2026-45585MEDIUM25 jul 2026

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

abrir ↗

GitHub PoC

CVE-2026-54900, CVE-2026-54902 - Draft

CVE-2026-54900MEDIUM25 jul 2026

Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling

33RISCO

abrir ↗

GitHub PoC★ 27

👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework | Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash extraction. Features: detect safe check, exploit full multi-threaded. 🛡️ CVSS 8.8 High - Use Ethically, Stay Legal. 🔒

CVE-2026-54121HIGH25 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISCO

abrir ↗

GitHub PoC

Auth Bypass in inetutils-telnetd

CVE-2026-24061CRITICALsob ataque25 jul 2026

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment

100RISCO

abrir ↗

GitHub PoC★ 2

Technical analysis and advisory for CVE-2026-48908: Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder.

CVE-2026-48908CRITICAL25 jul 2026

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

68RISCO

abrir ↗

GitHub PoC★ 3

Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030.

CVE-2026-63030CRITICALsob ataque25 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-54121

CVE-2026-54121HIGH25 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISCO

abrir ↗

GitHub PoC

Security Advisory for CVE-2026-51564

CVE-2026-51564MEDIUM25 jul 2026

An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external

33RISCO

abrir ↗

GitHub PoC

Security Advisory for CVE-2026-51565

CVE-2026-51565MEDIUM25 jul 2026

Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attacker

33RISCO

abrir ↗

GitHub PoC

WordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)

CVE-2026-63030CRITICALsob ataque24 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

Pedit COW – Linux Kernel Local Privilege Escalation (CVE-2026-46331)

CVE-2026-46331HIGH24 jul 2026

net/sched: fix pedit partial COW leading to page cache corruption

41RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-60206

CVE-2026-60206CRITICAL24 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RISCO

abrir ↗

GitHub PoC★ 33

cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security

CVE-2026-60206CRITICAL24 jul 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

48RISCO

abrir ↗

GitHub PoC

Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash

CVE-2026-66729HIGH24 jul 2026

facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser

41RISCO

abrir ↗

GitHub PoC

manfredgabriel/cve-2021-43798-lab

CVE-2021-43798HIGHsob ataque24 jul 2026

Grafana path traversal

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.