Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

13.654 exploits

GitHub PoC★ 3

Apache OFBiz CVE-2024-38856

CVE-2024-38856HIGHsob ataque28 ago 2024

Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

100RISCO

abrir ↗

GitHub PoC★ 2

Remotely Exploiting The Kernel Via IPv6

CVE-2024-38063CRITICAL28 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 7

potential memory corruption vulnerabilities in IPv6 networks.

CVE-2024-38063CRITICAL28 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 4

Windows TCP/IP IPv6(CVE-2024-38063)

CVE-2024-38063CRITICAL28 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 2

D0rDa4aN919/CVE-2023-22809-Exploiter

CVE-2023-22809HIGH28 ago 2024

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RISCO

abrir ↗

GitHub PoC

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

CVE-2024-7593CRITICALsob ataque28 ago 2024

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remo

100RISCO

abrir ↗

GitHub PoC★ 1

【Teedy 1.11】Account Takeover via XSS

CVE-2024-46278HIGH28 ago 2024

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.

41RISCO

abrir ↗

GitHub PoC

Apache: a Mainstream Web Service Turned a Vector of Attack for Remote Code Execution

CVE-2021-41773HIGHsob ataqueransomware28 ago 2024

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 4

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879

CVE-2024-4879CRITICALsob ataque27 ago 2024

Jelly Template Injection Vulnerability in ServiceNow UI Macros

100RISCO

abrir ↗

GitHub PoC

CVE-2023-4220 Chamilo Exploit

CVE-2023-4220HIGH27 ago 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RISCO

abrir ↗

GitHub PoC

zxybfq/CVE-2021-4034

CVE-2021-4034HIGHsob ataque27 ago 2024

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC★ 7

PoC for the CVE-2024 Litespeed Cache Privilege Escalation

CVE-2024-28000CRITICAL27 ago 2024

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

75RISCO

abrir ↗

GitHub PoC★ 10

CVE-2024-25641 - RCE Automated Exploit - Cacti 1.2.26

CVE-2024-25641CRITICAL27 ago 2024

Cacti RCE vulnerability when importing packages

85RISCO

abrir ↗

GitHub PoC★ 2

PoC for CVE-2024-25641 Authenticated RCE on Cacti v1.2.26

CVE-2024-25641CRITICAL27 ago 2024

Cacti RCE vulnerability when importing packages

85RISCO

abrir ↗

GitHub PoC★ 2

CVE-2023-41425 - Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

CVE-2023-41425MEDIUM27 ago 2024

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code

60RISCO

abrir ↗

GitHub PoC★ 4

Mass scanner for CVE-2024-36401

CVE-2024-36401CRITICALsob ataque27 ago 2024

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISCO

abrir ↗

GitHub PoC★ 20

patchpoint/CVE-2024-38063

CVE-2024-38063CRITICAL27 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 1

Nuclei template to scan for Apache Ofbiz affecting versions before 18.12.15

CVE-2024-38856HIGHsob ataque27 ago 2024

Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

100RISCO

abrir ↗

GitHub PoC

RCE OpenSSH CVE-2024-6387 Check and Exploit

CVE-2024-6387HIGH26 ago 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISCO

abrir ↗

GitHub PoC

sanan2004/CVE-2023-20198

CVE-2023-20198CRITICALsob ataque26 ago 2024

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

abrir ↗

GitHub PoC★ 8

This repository automates the process of exploiting CVE-2024-25641 on Cacti 1.2.26

CVE-2024-25641CRITICAL26 ago 2024

Cacti RCE vulnerability when importing packages

85RISCO

abrir ↗

GitHub PoC

POC & Lab For CVE-2021-41773

CVE-2021-41773HIGHsob ataqueransomware26 ago 2024

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 2

Apache-HTTP-Server-2.4.50-RCE This tool is designed to test Apache servers for the CVE-2021-41773 / CVE-2021-42013 vulnerability. It is intended for educational purposes only and should be used responsibly on systems you have explicit permission to test.

CVE-2021-41773HIGHsob ataqueransomware26 ago 2024

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

Sudo Privilege Escalation: CVE-2023-22809 Simulation This project simulates the Sudo privilege escalation vulnerability (CVE-2023-22809) to demonstrate how unauthorized root access can be gained. It involves identifying and exploiting this vulnerability in a controlled environment using Parrot OS, the Sudo command, and Bash scripting.

CVE-2023-22809HIGH26 ago 2024

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RISCO

abrir ↗

GitHub PoC

CVE-2024-45265

CVE-2024-45265CRITICAL26 ago 2024

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to exe

48RISCO

abrir ↗

GitHub PoC★ 5

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000

CVE-2024-28000CRITICAL25 ago 2024

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

75RISCO

abrir ↗

GitHub PoC★ 2

Modified for GLPI Offsec Lab: call_user_func, array_map, passthru

CVE-2022-35914CRITICALsob ataque25 ago 2024

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RISCO

abrir ↗

GitHub PoC★ 77

GiveWP PHP Object Injection exploit

CVE-2024-5932CRITICAL25 ago 2024

GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution

85RISCO

abrir ↗

GitHub PoC★ 1

Kernel exploit for Xbox SystemOS using CVE-2024-30088

CVE-2024-30088HIGHsob ataqueransomware25 ago 2024

Windows Kernel Elevation of Privilege Vulnerability

83RISCO

abrir ↗

GitHub PoC★ 3

Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800

CVE-2024-4358CRITICALsob ataque24 ago 2024

Registration Authentication Bypass Vulnerability

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.