Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados

34.478CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentes populares risco

13.627 exploits

GitHub PoC★ 1

CVE-2024-6387-checker is a tool or script designed to detect the security vulnerability known as CVE-2024-6387 OpenSSH. CVE-2024-6387 OpenSSH is an entry in the Common Vulnerabilities and Exposures (CVE) that documents security weaknesses discovered in certain software or systems.

CVE-2023-4596CRITICAL06 ago 2024

Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload

68RISCO

GitHub PoC★ 1

CVE-2024-6387-checker is a tool or script designed to detect the security vulnerability known as CVE-2024-6387 OpenSSH. CVE-2024-6387 OpenSSH is an entry in the Common Vulnerabilities and Exposures (CVE) that documents security weaknesses discovered in certain software or systems.

CVE-2024-6387HIGH06 ago 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISCO

GitHub PoC★ 2

A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability (CVE-2011-2523) present in vsFTP 2.3.4

CVE-2011-2523—03 ago 2024

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

GitHub PoC

Abdurahmon3236/CVE-2024-6366

CVE-2024-6366CRITICAL03 ago 2024

User Profile Builder < 3.11.8 - Unauthenticated Media Upload

68RISCO

GitHub PoC

Abdurahmon3236/CVE-2024-36539

CVE-2024-36539CRITICAL03 ago 2024

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining t

48RISCO

GitHub PoC

nastar-id/CVE-2024-32700

CVE-2024-32700CRITICAL03 ago 2024

WordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability

48RISCO

GitHub PoC

adapting CVE-2024-32002 for running offline and locally

CVE-2024-32002CRITICAL02 ago 2024

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISCO

GitHub PoC★ 1

Proof of concept exploit for CVE-2021-21551

CVE-2021-21551HIGHsob ataque02 ago 2024

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

98RISCO

GitHub PoC★ 2

Vulnerability Scanner for CVE-2024-37085 and Exploits ( For Educational Purpose only)

CVE-2024-37085MEDIUMsob ataqueransomware02 ago 2024

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) per

68RISCO

GitHub PoC

Abdurahmon3236/CVE-2024-40110

CVE-2024-40110CRITICAL02 ago 2024

Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability

48RISCO

GitHub PoC

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

CVE-2023-4220HIGH02 ago 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RISCO

GitHub PoC

y1s4s/CVE-2024-36401-PoC

CVE-2024-36401CRITICALsob ataque01 ago 2024

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISCO

GitHub PoC★ 1

apena-ba/CVE-2024-39304

CVE-2024-39304HIGH31 jul 2024

ChurchCRM SQL Injection Vulnerability

41RISCO

GitHub PoC

Exploit script for CVE-2022-41544 in GetSimple CMS, with enhanced error handling and detailed usage instructions.

CVE-2022-41544HIGH31 jul 2024

GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file paramete

41RISCO

GitHub PoC

批量验证POC和EXP

CVE-2024-4577CRITICALsob ataqueransomware31 jul 2024

Argument Injection in PHP-CGI

100RISCO

GitHub PoC★ 1

bananoname/cve-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware31 jul 2024

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

GitHub PoC★ 1

An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server

CVE-2024-6387HIGH31 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISCO

GitHub PoC★ 1

12

CVE-2023-25813CRITICAL30 jul 2024

SQL Injection via replacements in sequelize

48RISCO

GitHub PoC★ 12

Proof of concept python script for regreSSHion exploit.

CVE-2024-6387HIGH30 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RISCO

GitHub PoC★ 86

GeoServer Remote Code Execution

CVE-2024-36401CRITICALsob ataque30 jul 2024

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RISCO

GitHub PoC

FlojBoj/CVE-2024-32002

CVE-2024-32002CRITICAL30 jul 2024

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISCO

GitHub PoC

KaSooMi0228/CVE-2024-25600-Bricks-Builder-WordPress

CVE-2024-25600CRITICAL30 jul 2024

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RISCO

GitHub PoC★ 3

PoC of CVE-2024-32002 - Remote Code Execution while cloning special-crafted local repositories

CVE-2024-32002CRITICAL30 jul 2024

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISCO

GitHub PoC

Just small script to exploit CVE-2024-32002

CVE-2024-32002CRITICAL30 jul 2024

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISCO

GitHub PoC★ 2

PoC for CVE-2024-34144

CVE-2024-34144CRITICAL29 jul 2024

A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_

60RISCO

GitHub PoC

projectforsix/CVE-2021-45428-Defacer

CVE-2021-45428—29 jul 2024

TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can uploa

50RISCO

GitHub PoC★ 80

Windows AppLocker Driver (appid.sys) LPE

CVE-2024-21338HIGHsob ataqueransomware29 jul 2024

Windows Kernel Elevation of Privilege Vulnerability

83RISCO

GitHub PoC

GIT RCE CVE-2024-32002

CVE-2024-32002CRITICAL29 jul 2024

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISCO

GitHub PoC★ 1

CVE-2024-39700 Proof of Concept

CVE-2024-39700CRITICAL29 jul 2024

Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action

48RISCO

GitHub PoC

Blind SQL Injection to RCE in a PHP open source application

CVE-2024-40498CRITICAL29 jul 2024

SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbit

48RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.