Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

79.305 exploits

GitHub PoC★ 1

Flowise Windows RCE exploit for CVE-2026-58057. Bypasses environment variable validation via case-sensitive flaw. Uses node_options to inject arbitrary code through MCP stdio. Supports reverse shell, persistence, file upload, credential dumping. For authorized security testing only.

CVE-2026-58057LOW23 jul 2026

Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity

28RISCO

GitHub PoC

CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783HIGHsob ataque23 jul 2026

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

71RISCO

GitHub PoC

Legacy HPE iMC vuln

CVE-2019-5392—23 jul 2026

A disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than ve

23RISCO

GitHub PoC

CVE-2026-66374: Knot Resolver 6.3.0 DNS-over-QUIC heap overflow (RCE)

CVE-2026-66374HIGH23 jul 2026

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) rece

41RISCO

GitHub PoC★ 326

Certighost POC

CVE-2026-54121HIGH23 jul 2026

Active Directory Certificate Services Elevation of Privilege Vulnerability

41RISCO

GitHub PoC

CVE Reproduction: cve-2025-55182-react2shell_reproduction

CVE-2025-55182CRITICALsob ataqueransomware23 jul 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

GitHub PoC

ghostpels/CVE-2026-13001

CVE-2026-13001CRITICAL23 jul 2026

Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

63RISCO

GitHub PoC

theeomega/CVE-2025-32432-POC

CVE-2025-32432CRITICALsob ataque23 jul 2026

Craft CMS Allows Remote Code Execution

100RISCO

GitHub PoC

CVE Reproduction: cve-2026-63030_60137-wordpress_rce_reproduction

CVE-2026-63030CRITICALsob ataque23 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

GitHub PoC★ 5

CVE-2026-43499 exploit configuration for realme RMX3888 (Android 16) - 20 verified kernel offsets

CVE-2026-43499HIGH23 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

VulnCheck XDB

initial-access

CVE-2026-23744CRITICAL23 jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISCO

VulnCheck XDB

info-leak

CVE-2024-43451MEDIUMsob ataque23 jul 2026

NTLM Hash Disclosure Spoofing Vulnerability

85RISCO

GitHub PoC

CVE Reproduction: cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577CRITICALsob ataqueransomware23 jul 2026

Argument Injection in PHP-CGI

100RISCO

GitHub PoC

Tproot es una máquina de nivel Muy Fácil de DockerLabs centrada en la explotación manual del servicio vsftpd 2.3.4 (CVE-2011-2523).

CVE-2011-2523—23 jul 2026

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

GitHub PoC

Proof-of-concept and offensive security research analyzing CVE-2026-23744 (MCPJam Inspector Unauthenticated RCE, Patched in v1.4.3+).

CVE-2026-23744CRITICAL23 jul 2026

REC in MCPJam inspector due to HTTP Endpoint exposes

75RISCO

GitHub PoC

Initialized & connected PostgreSQL to Metasploit. Reconnoitered 10.1.16.0/24 with Nmap and imported results. Enumerated hosts/services using SYN, SMB & LDAP scanners. Exploited DC10 via ZeroLogon (CVE-2020-1472), dumped AD NTLM hashes with Impacket, performed Pass-the-Hash, then gained a Meterpreter reverse shell.

CVE-2020-1472MEDIUMsob ataqueransomware23 jul 2026

Netlogon Elevation of Privilege Vulnerability

100RISCO

GitHub PoC★ 1

CVE Reproduction: cve-2026-41940-cpanel_authbypass_reproduction

CVE-2026-41940CRITICALsob ataqueransomware23 jul 2026

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISCO

GitHub PoC

CVE-2026-42533 Nginx

CVE-2026-42533CRITICAL23 jul 2026

NGINX Map directive and Regex matching vulnerability

48RISCO

GitHub PoC★ 12

DavidCarliez/CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804HIGH23 jul 2026

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

41RISCO

GitHub PoC

CVE Reproduction: cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770CRITICALsob ataque23 jul 2026

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

100RISCO

GitHub PoC

Dynamo2k1/CVE-2026-33017

CVE-2026-33017CRITICALsob ataque23 jul 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISCO

GitHub PoC

Security analysis and report of CVE-2024-6387 OpenSSH vulnerability, including vulnerability details, CVSS evaluation, and mitigation recommendations.

CVE-2024-6387HIGH23 jul 2026

Openssh: regresshion - race condition in ssh allows rce/dos

63RISCO

GitHub PoC★ 1

Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.

CVE-2026-41089CRITICAL22 jul 2026

Windows Netlogon Remote Code Execution Vulnerability

70RISCO

GitHub PoC

PoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exception's full stack trace is returned to the client (CWE-209). Fixed in 4.14.8/4.18.3/4.21.0.

CVE-2026-56139MEDIUM22 jul 2026

Apache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients

33RISCO

VulnCheck XDB

local

CVE-2023-2640HIGH22 jul 2026

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay

61RISCO

VulnCheck XDB

local

CVE-2023-32629HIGH22 jul 2026

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks

61RISCO

GitHub PoC

PoC reproducer for CVE-2026-55993 (Apache Camel camel-atmosphere-websocket): the WebSocket consumer copies connection query parameters onto the Exchange unfiltered, so an injected CamelHttpUri drives a server-side request (SSRF) and leaks resolved property placeholders. Fixed in 4.14.8/4.18.3/4.21.0.

CVE-2026-55993HIGH22 jul 2026

Apache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling influencing internal behaviour

41RISCO

GitHub PoC★ 17

CVE-2026-43499 PoC Scanner

CVE-2026-43499HIGH22 jul 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

VulnCheck XDB

initial-access

CVE-2026-63030CRITICALsob ataque22 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

GitHub PoC

Scan WordPress installations for wp2shell vulnerabilities (CVE-2026-63030 + CVE-2026-60137). Identifies full RCE and SQL injection risks across multiple sites with severity classification and CSV reporting.

CVE-2026-63030CRITICALsob ataque22 jul 2026

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.