Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados
34.508CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentespopularesrisco
13.689 exploits
GitHub PoC
rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability
CVE-2023-27350CRITICALsob ataqueransomware10 mai 2024
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir ↗
GitHub PoC
Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock (CVE-2014-6271 & CVE-2014-7169) vulnerabilities in Bash environments.
CVE-2014-6271CRITICALsob ataque10 mai 2024
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗
GitHub PoC
rasan2001/Microsoft-Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708
CVE-2019-0708CRITICALsob ataqueransomware10 mai 2024
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
GitHub PoC
batmoshka55/CVE-2018-9995_dvr_credentials
CVE-2018-9995—09 mai 2024
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISCO
abrir ↗
GitHub PoC
shaily29-eng/CyberSecurity_CVE-2021-45046
CVE-2021-45046CRITICALsob ataqueransomware09 mai 2024
Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack
100RISCO
abrir ↗
GitHub PoC★ 1
xbz0n/CVE-2024-0566
CVE-2024-0566HIGH09 mai 2024
Smart Manager < 8.28.0 - Admin+ SQL Injection
41RISCO
abrir ↗
GitHub PoC★ 1
xbz0n/CVE-2024-0399
CVE-2024-0399HIGH09 mai 2024
WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
41RISCO
abrir ↗
GitHub PoC★ 16
GUI Exploit Tool for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)
CVE-2020-0688HIGHsob ataqueransomware09 mai 2024
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RISCO
abrir ↗
GitHub PoC
jrbH4CK/CVE-2022-22963
CVE-2022-22963CRITICALsob ataque08 mai 2024
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISCO
abrir ↗
GitHub PoC
CVE-2024-27956
CVE-2024-27956CRITICAL07 mai 2024
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RISCO
abrir ↗
GitHub PoC
[CVE-2024-23897] Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution (RCE)
CVE-2024-23897CRITICALsob ataqueransomware07 mai 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗
GitHub PoC★ 4
Critical use-after-free vulnerability discovered in Tinyproxy
CVE-2023-49606CRITICAL07 mai 2024
A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A
60RISCO
abrir ↗
GitHub PoC★ 18
PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal
CVE-2024-31848CRITICAL07 mai 2024
A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedde
63RISCO
abrir ↗
GitHub PoC
GalloLuigi/Analisi-CVE-2017-5715
CVE-2017-5715MEDIUM06 mai 2024
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized discl
55RISCO
abrir ↗
GitHub PoC★ 1
An issue in HSC Cybersecurity HSC Mailinspector version 5.2.17-3 has been identified, allowing a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component.
CVE-2024-32370CRITICAL06 mai 2024
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive info
48RISCO
abrir ↗
GitHub PoC★ 7
LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buffer Overflow Remote Code Execution Vulnerability
CVE-2023-46012CRITICAL06 mai 2024
Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP
48RISCO
abrir ↗
GitHub PoC
Turvanõrkuse CVE 2024 3273 analüüs: D-Link seadmete käsusüst
CVE-2024-3273HIGHsob ataque05 mai 2024
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISCO
abrir ↗
GitHub PoC★ 2
PoC for the Untrusted Pointer Dereference in the appid.sys driver
CVE-2024-21338HIGHsob ataqueransomware05 mai 2024
Windows Kernel Elevation of Privilege Vulnerability
83RISCO
abrir ↗
GitHub PoC★ 1
FoxyProxys/CVE-2024-27956
CVE-2024-27956CRITICAL05 mai 2024
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RISCO
abrir ↗
GitHub PoC★ 1
Joomla! v4.2.8 - Unauthenticated information disclosure
CVE-2023-23752MEDIUMsob ataque04 mai 2024
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
GitHub PoC
Vignesh2712/Automation-for-Juniper-cve-2023-36845
CVE-2023-36845CRITICALsob ataque04 mai 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗
GitHub PoC
Bypass for CVE-2007-4559 Trellix patch
CVE-2007-4559CRITICAL03 mai 2024
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows
53RISCO
abrir ↗
GitHub PoC★ 2
CVE-2024-21413 Microsoft Outlook RCE Exploit
CVE-2024-21413CRITICALsob ataque03 mai 2024
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 1
Jenkins CVE-2024-23897: Arbitrary File Read Vulnerability
CVE-2024-23897CRITICALsob ataqueransomware03 mai 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗
GitHub PoC
CVE-2024-27956 WORDPRESS RCE PLUGIN
CVE-2024-27956CRITICAL03 mai 2024
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RISCO
abrir ↗
GitHub PoC★ 7
A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.
CVE-2024-4040CRITICALsob ataque03 mai 2024
Unauthenticated arbitrary file read and remote code execution in CrushFTP
100RISCO
abrir ↗
GitHub PoC★ 7
Exploit for Microsoft SmartScreen malicious execution (april 2024)
CVE-2024-29988HIGHsob ataque03 mai 2024
SmartScreen Prompt Security Feature Bypass Vulnerability
83RISCO
abrir ↗
GitHub PoC
ShellUnease/CVE-2024-34833-payroll-management-system-rce
CVE-2024-34833CRITICAL02 mai 2024
Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settin
48RISCO
abrir ↗
GitHub PoC
xsxtw/CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware02 mai 2024
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
GitHub PoC
xsxtw/CVE-2019-0232
CVE-2019-0232—02 mai 2024
When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0
60RISCO
abrir ↗
← anteriorpágina 228 / 457próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.