Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

13.627 exploits

GitHub PoC★ 1

CVE-2023-20198是思科IOS XE软件Web UI功能中的一个严重漏洞，允许未经身份验证的远程攻击者在受影响的系统上创建具有特权级别15的账户，从而完全控制设备。

CVE-2023-20198CRITICALsob ataque23 nov 2024

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

CVE-2024-52433CRITICAL22 nov 2024

WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability

63RISCO

GitHub PoC★ 2

CVE-2024-0012批量检测脚本

CVE-2024-0012CRITICALsob ataqueransomware22 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISCO

GitHub PoC

Broken Authentication in Wordpress plugin (Wawp Plugin < 3.0.18)

CVE-2024-52475CRITICAL22 nov 2024

WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability

48RISCO

GitHub PoC

CVE-2024-0012是Palo Alto Networks PAN-OS软件中的一个身份验证绕过漏洞。该漏洞允许未经身份验证的攻击者通过网络访问管理Web界面，获取PAN-OS管理员权限，从而执行管理操作、篡改配置，或利用其他需要身份验证的特权提升漏洞（如CVE-2024-9474）

CVE-2024-0012CRITICALsob ataqueransomware22 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISCO

GitHub PoC

punitdarji/Paloalto-CVE-2024-0012

CVE-2024-0012CRITICALsob ataqueransomware22 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISCO

GitHub PoC★ 2

This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as vulnerable and logs results to vuln.txt. Simple and efficient, it helps security researchers and admins detect and address risks quickly.

CVE-2024-8856CRITICAL21 nov 2024

Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

85RISCO

GitHub PoC★ 1

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

CVE-2024-10508CRITICAL21 nov 2024

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

48RISCO

GitHub PoC★ 1

This is POC of CVE-2024-29671

CVE-2024-29671CRITICAL21 nov 2024

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code vi

53RISCO

GitHub PoC★ 1

PANW NGFW CVE-2024-0012

CVE-2024-0012CRITICALsob ataqueransomware20 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISCO

GitHub PoC

CVE-2023-28354

CVE-2023-28354CRITICAL20 nov 2024

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against aff

48RISCO

GitHub PoC

FAFAF

CVE-2018-15473MEDIUM20 nov 2024

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

GitHub PoC

CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability

CVE-2024-52316CRITICAL20 nov 2024

Apache Tomcat: Authentication bypass when using Jakarta Authentication API

48RISCO

GitHub PoC★ 3

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

CVE-2024-10924CRITICAL20 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISCO

GitHub PoC

GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization

CVE-2024-6330CRITICAL20 nov 2024

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

48RISCO

GitHub PoC

PoC for PAN-OS Exploit

CVE-2024-9474MEDIUMsob ataqueransomware20 nov 2024

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RISCO

GitHub PoC

POC for CVE-2024-10924 written in Python

CVE-2024-10924CRITICAL20 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISCO

GitHub PoC★ 24

watchtowrlabs/palo-alto-panos-cve-2024-0012

CVE-2024-0012CRITICALsob ataqueransomware19 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISCO

GitHub PoC★ 143

WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

CVE-2024-49039HIGHsob ataqueransomware19 nov 2024

Windows Task Scheduler Elevation of Privilege Vulnerability

76RISCO

GitHub PoC

Simple Python script

CVE-2024-10924CRITICAL19 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISCO

GitHub PoC★ 19

Exploits Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924).

CVE-2024-10924CRITICAL19 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISCO

GitHub PoC★ 20

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

CVE-2024-0012CRITICALsob ataqueransomware19 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISCO

GitHub PoC

ubaydev/CVE-2024-10508

CVE-2024-10508CRITICAL19 nov 2024

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

48RISCO

GitHub PoC★ 45

PAN-OS auth bypass + RCE

CVE-2024-9474MEDIUMsob ataqueransomware19 nov 2024

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RISCO

GitHub PoC★ 3

Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (npm:bower)

CVE-2024-42640CRITICAL19 nov 2024

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Explo

75RISCO

GitHub PoC

wudidwo/CVE-2017-12615-poc

CVE-2017-12615HIGHsob ataqueransomware19 nov 2024

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RISCO

GitHub PoC★ 8

WARNING: This is a vulnerable application to test the exploit for the Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924). Run it at your own risk!

CVE-2024-10924CRITICAL18 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RISCO

GitHub PoC

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

CVE-2024-3806CRITICAL18 nov 2024

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

48RISCO

GitHub PoC

Andriod binder bug record

CVE-2019-2215HIGHsob ataque18 nov 2024

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISCO

GitHub PoC★ 2

Relais 2FA <= 1.0 - Authentication Bypass

CVE-2024-10245CRITICAL17 nov 2024

Relais 2FA <= 1.0 - Authentication Bypass

48RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.