Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.180exploits catalogados

31.691CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.469Referência 19.841GitHub PoC 13.140VulnCheck XDB 8.078Nuclei 4.190Metasploit 3.462✓ só verificadosrecentes populares risco

71.180 exploits

GitHub PoC

Reproduction lab for CVE-2025-29927 — Next.js middleware authorization bypass (CVSS 9.1)

CVE-2025-29927CRITICAL10 jun 2026

Authorization Bypass in Next.js Middleware

85RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-24813CRITICALsob ataque10 jun 2026

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware10 jun 2026

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 1

GrayXploit Security research and defensive team validate this toolkit for CVE-2026-0257 (PAN-OS GlobalProtect Authentication Bypass). Includes vulnerability assessment, detection guidance, technical analysis, indicators of compromise (IOCs), and remediation validation resources for security teams and defenders.

CVE-2026-0257HIGHsob ataque10 jun 2026

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

100RISCO

abrir ↗

GitHub PoC

WORDPRESS

CVE-2026-5718HIGH10 jun 2026

Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass

56RISCO

abrir ↗

VulnCheck XDB

local

CVE-2023-2640HIGH10 jun 2026

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay

61RISCO

abrir ↗

GitHub PoC

CVE-2026-48962 - IO::Compress - Code Execution

CVE-2026-48962HIGH10 jun 2026

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

41RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-50751CRITICALsob ataqueransomware10 jun 2026

User Authentication Bypass in VPN Remote Access and Mobile Access

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-5027HIGH10 jun 2026

Langflow - Path Traversal Arbitrary File Write via upload_user_file

68RISCO

abrir ↗

GitHub PoC

Dhananjayasj/CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-

CVE-2025-24813CRITICALsob ataque10 jun 2026

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-10520 - Ivanti Sentry Pre-Auth OS Command Injection Mass Scanner

CVE-2026-10520CRITICAL10 jun 2026

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

85RISCO

abrir ↗

GitHub PoC

CLI rewrite of the Drupalgeddon2 (CVE-2018-7600) PoC — for authorised testing/education

CVE-2018-7600CRITICALsob ataqueransomware10 jun 2026

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 5

CVE-2026-25089 - Fortinet FortiSandbox

CVE-2026-25089CRITICALsob ataque10 jun 2026

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

90RISCO

abrir ↗

GitHub PoC

1-day exploit for CVE-2026-49417

CVE-2026-49417HIGH10 jun 2026

Multiple vulnerabilities in the sound(4) mmap path

41RISCO

abrir ↗

GitHub PoC

1-day exploit for CVE-2026-45258

CVE-2026-45258HIGH10 jun 2026

Multiple vulnerabilities in the sound(4) mmap path

41RISCO

abrir ↗

GitHub PoC

FreeBSD LPE

CVE-2026-49413HIGH10 jun 2026

Flaw in Linuxulator execution of setugid binaries

41RISCO

abrir ↗

GitHub PoC

CVE-2026-44963 - Draft - Veeam

CVE-2026-44963CRITICAL10 jun 2026

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

48RISCO

abrir ↗

GitHub PoC★ 2

HTTP.sys RCE

CVE-2026-47291CRITICAL10 jun 2026

HTTP.sys Remote Code Execution Vulnerability

33RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-0257HIGHsob ataque10 jun 2026

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2026-10520CRITICAL10 jun 2026

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

85RISCO

abrir ↗

GitHub PoC★ 3

Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload [POC & Xploit]

CVE-2026-9067CRITICAL10 jun 2026

Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

48RISCO

abrir ↗

GitHub PoC★ 4

CVE-2026-49975漏洞复现

CVE-2026-49975HIGH10 jun 2026

Apache HTTP Server: mod_http2 denial of service

46RISCO

abrir ↗

GitHub PoC★ 1

Validation report for the RoguePlanet Microsoft Defender PoC in a controlled Windows 11 lab environment, including build notes, Defender detection results, risk assessment, and mitigation recommendations.

CVE-2026-50656HIGH10 jun 2026

Microsoft Defender Elevation of Privilege Vulnerability

41RISCO

abrir ↗

GitHub PoC

adamshaikhma/CVE-2026-11645

CVE-2026-11645HIGHsob ataque10 jun 2026

Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra

71RISCO

abrir ↗

GitHub PoC★ 2

CVE-2026-49975

CVE-2026-49975HIGH10 jun 2026

Apache HTTP Server: mod_http2 denial of service

46RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-29927CRITICAL10 jun 2026

Authorization Bypass in Next.js Middleware

85RISCO

abrir ↗

VulnCheck XDB

local

CVE-2023-32629HIGH10 jun 2026

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks

56RISCO

abrir ↗

GitHub PoC★ 1

Insert PHP Plugin PHP Code Injection

CVE-2017-20251CRITICAL09 jun 2026

WordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API

48RISCO

abrir ↗

GitHub PoC

Running OWASP cve-lite-cli against the pi monorepo: scan journey and key finding (vitest CVE-2026-47429).

CVE-2026-47429CRITICAL09 jun 2026

Vitest: Arbitrary file can be read and executed when Vitest UI server is listening

48RISCO

abrir ↗

GitHub PoC

jenniferreire26/CVE-2024-21182

CVE-2024-21182HIGHsob ataque09 jun 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

83RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.