Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

14.946 exploits

GitHub PoC

React2Shell(CVE-2025-55182) 취약점 기반 침해 시나리오를 재현하고, Wazuh/Sysmon/Coraza WAF 로그로 침해사고를 분석·대응한 DFIR 프로젝트

CVE-2025-55182CRITICALsob ataqueransomware16 ago 2026

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RISCO

GitHub PoC★ 3

Using CVE-2026-43499 to root your Galaxy S24 Ultra(SM-S9280 ,(China / Hong Kong SAR / Taiwan))

CVE-2026-43499HIGH16 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC

CVE-2026-73633（S2-072）概念验证代码

CVE-2026-73633HIGH16 ago 2026

Apache Struts: Unbounded read of a JSON request body

41RISCO

GitHub PoC★ 3

One-Day POC | GeoServer Unauthenticated SQL injection to complete RCE

CVE-2026-76904CRITICAL16 ago 2026

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

63RISCO

GitHub PoC

PoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3)

CVE-2026-71204MEDIUM16 ago 2026

changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement

33RISCO

GitHub PoC

PoC: changedetection.io unlimited login brute-force, no rate limiting (CVE-2026-71205, Medium 6.5)

CVE-2026-71205MEDIUM16 ago 2026

changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force

33RISCO

GitHub PoC

Simple script to achieve safe and non-desruptive active detection of CVE-2026-72898 (SQLi in Metabase)

CVE-2026-72898CRITICALsob ataque16 ago 2026

Metabase SQL injection via password reset endpoint

100RISCO

GitHub PoC★ 1

CVE-2026-73678 — MindsDB Minds Platform unauthenticated RCE via scratchpad exec (CVSS 10.0). Verified end-to-end with real LLM

CVE-2026-73678CRITICAL16 ago 2026

MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

48RISCO

GitHub PoC

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

CVE-2026-18366CRITICAL16 ago 2026

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

48RISCO

GitHub PoC

PoC: changedetection.io unauthenticated OpenAPI schema disclosure (CVE-2026-71203, Medium 5.3)

CVE-2026-71203MEDIUM16 ago 2026

changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema

33RISCO

GitHub PoC★ 3

Public writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.

CVE-2026-6837HIGH16 ago 2026

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions

41RISCO

GitHub PoC

Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login.

CVE-2026-8508MEDIUM16 ago 2026

An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throug

33RISCO

GitHub PoC★ 2

SambaCry Explanation and Exploitation Demo with POC

CVE-2017-7494CRITICALsob ataqueransomware15 ago 2026

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISCO

GitHub PoC

DuyDuongDuyDuong/CVE-2024-4577-Exploitation-AsyncRAT-Deployment-DFIR-Investigation

CVE-2024-4577CRITICALsob ataqueransomware15 ago 2026

Argument Injection in PHP-CGI

100RISCO

GitHub PoC

Responsible disclosure write-ups for CVE-2026-8793 - PaperCut NG 25.0.11

CVE-2026-8793MEDIUM15 ago 2026

PaperCut NG/MF: Insufficient brute-force protection

33RISCO

GitHub PoC★ 3

One-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.

CVE-2026-71362CRITICAL15 ago 2026

Adobe Commerce | Incorrect Authorization (CWE-863)

68RISCO

GitHub PoC

OpenMed < 1.5.2 unauthenticated RCE via PII privacy-filter model loading and trust_remote_code=True

CVE-2026-47117CRITICAL15 ago 2026

OpenMed < 1.5.2 Remote Code Execution via PII Model Loading

48RISCO

GitHub PoC

Python StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML <data expr> evaluation and Python eval() injection.

CVE-2026-47103CRITICAL15 ago 2026

Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

48RISCO

GitHub PoC

PoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.

CVE-2026-9090CRITICAL15 ago 2026

CVE-2026-9090

48RISCO

GitHub PoC★ 382

CVE-2026-9830 Proof of Concept

CVE-2026-9830HIGH15 ago 2026

BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug

41RISCO

GitHub PoC

CVE-2026-17544: PHP bcmath OOB write → universal memory-only RCE & disable_functions/open_basedir bypass. Offset-free runtime resolver. Verified on PHP 8.4.x / 8.5.x.

CVE-2026-17544HIGH15 ago 2026

Out-of-bounds write in bccomp() via crafted operand and scale

41RISCO

GitHub PoC

uproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.

CVE-2026-9147HIGH15 ago 2026

uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadata

41RISCO

GitHub PoC

CVE-2026-43499 research port for Galaxy Z Fold4 SM-F936W F936WVLU1AVGA (in progress)

CVE-2026-43499HIGH15 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC

Full root in kernel domain with selinux permissive **MOVED TO THIS REPO https://github.com/CamsShaft/IonStack-S22 WILL DELETE THIS ONE SOON**

CVE-2026-43499HIGH15 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC★ 2

CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.

CVE-2026-43499HIGH15 ago 2026

rtmutex: Use waiter::task instead of current in remove_waiter()

41RISCO

GitHub PoC

S2-072（CVE-2026-73633）poc

CVE-2026-73633HIGH15 ago 2026

Apache Struts: Unbounded read of a JSON request body

41RISCO

GitHub PoC

This is my simple implementation of an exploit for the PwnKit vulnerability.

CVE-2021-4034HIGHsob ataqueransomware15 ago 2026

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

GitHub PoC

CVE-2026-58231 Detection & Confirmation Script

CVE-2026-58231CRITICAL15 ago 2026

Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

48RISCO

GitHub PoC

ghostpels/CVE-2026-13610

CVE-2026-13610HIGH15 ago 2026

KiviCare < 4.5.2 - Unauthenticated Privilege Escalation via Registration

41RISCO

GitHub PoC

Hunt-Benito/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678CRITICAL15 ago 2026

MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

48RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.