Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

13.689 exploits

GitHub PoC★ 3

Vulnerability in PHP Phar files, due to buffer overflow, arises from insufficient length checks on file names within the Phar archive. Malicious actors can craft Phar files with long file names, leading to buffer overflow and potential execution of malicious code or data leakage. This vulnerability can be exploited for code execution CVE-2023-3824

CVE-2023-3824CRITICAL18 mar 2024

Buffer overflow and overread in phar_dir_read()

53RISCO

GitHub PoC★ 20

A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1

CVE-2024-23334MEDIUM18 mar 2024

aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

70RISCO

GitHub PoC★ 54

Fortinet FortiClient EMS SQL Injection

CVE-2023-48788CRITICALsob ataqueransomware18 mar 2024

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versio

100RISCO

GitHub PoC

Proof-of-concept exploit for CVE-2024-25153.

CVE-2024-25153CRITICAL18 mar 2024

Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

60RISCO

GitHub PoC★ 1

K3ysTr0K3R/CVE-2017-12617-EXPLOIT

CVE-2017-12617HIGHsob ataque18 mar 2024

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RISCO

GitHub PoC★ 12

The PoC demonstrates the potential for remote code execution by exploiting the identified security flaw.

CVE-2024-21762CRITICALsob ataqueransomware17 mar 2024

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0

100RISCO

GitHub PoC★ 7

jakabakos/CVE-2023-43208-mirth-connect-rce-poc

CVE-2023-43208CRITICALsob ataqueransomware17 mar 2024

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that

100RISCO

GitHub PoC★ 4

sxyrxyy/aiohttp-exploit-CVE-2024-23334-certstream

CVE-2024-23334MEDIUM17 mar 2024

aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

70RISCO

GitHub PoC★ 3

Exploit for Open eClass – CVE-2024-26503: Unrestricted File Upload Leads to Remote Code Execution

CVE-2024-26503CRITICAL15 mar 2024

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to

48RISCO

GitHub PoC

This is a potentially vulnerable Java web application containing Log4j affected by log4shell(CVE-2021-44228).

CVE-2021-44228CRITICALsob ataqueransomware15 mar 2024

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 29

A PoC exploit for CVE-2023-43208 - Mirth Connect Remote Code Execution (RCE)

CVE-2023-43208CRITICALsob ataqueransomware15 mar 2024

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that

100RISCO

GitHub PoC

exploit for f5-big-ip RCE cve-2023-46747

CVE-2023-46747CRITICALsob ataqueransomware15 mar 2024

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISCO

GitHub PoC

manrop2702/CVE-2020-7961

CVE-2020-7961CRITICALsob ataque14 mar 2024

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c

100RISCO

GitHub PoC

A CLI tool for detecting CVE-2023-20048 vulnerability in Cisco Firepower Management Center.

CVE-2023-20048CRITICAL14 mar 2024

A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authent

53RISCO

GitHub PoC

corelight/CVE-2021-38647-noimages

CVE-2021-38647CRITICALsob ataqueransomware13 mar 2024

Open Management Infrastructure Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 16

Chequea si tu firewall es vulnerable a CVE-2024-21762 (RCE sin autenticación)

CVE-2024-21762CRITICALsob ataqueransomware13 mar 2024

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0

100RISCO

GitHub PoC★ 150

out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability

CVE-2024-21762CRITICALsob ataqueransomware13 mar 2024

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0

100RISCO

GitHub PoC★ 3

hienkiet/CVE-2022-21445-for-12.2.1.3.0-Weblogic

CVE-2022-21445CRITICALsob ataque12 mar 2024

Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF

90RISCO

GitHub PoC★ 42

Proof-of-concept exploit for CVE-2024-25153.

CVE-2024-25153CRITICAL12 mar 2024

Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

60RISCO

GitHub PoC★ 1

CVE-2023-23752 Data Extractor

CVE-2023-23752MEDIUMsob ataque12 mar 2024

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

GitHub PoC★ 92

Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)

CVE-2024-29059HIGHsob ataque11 mar 2024

.NET Framework Information Disclosure Vulnerability

100RISCO

GitHub PoC

CSV Injection in Addactis IBNRS 3.10.3.107

CVE-2024-29375CRITICAL11 mar 2024

CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a craf

48RISCO

GitHub PoC★ 17

Demo showing Claude Opus does not find CVE-2023-0266

CVE-2023-0266HIGHsob ataque10 mar 2024

Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

71RISCO

GitHub PoC★ 1

CharonDefalt/CVE-2024-27198-RCE

CVE-2024-27198CRITICALsob ataqueransomware09 mar 2024

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RISCO

GitHub PoC★ 8

A PoC exploit for CVE-2024-27198 - JetBrains TeamCity Authentication Bypass

CVE-2024-27198CRITICALsob ataqueransomware09 mar 2024

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RISCO

GitHub PoC★ 3

passwa11/CVE-2024-27198-RCE

CVE-2024-27198CRITICALsob ataqueransomware08 mar 2024

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RISCO

GitHub PoC★ 2

https://github.com/Phamchie/CVE-2023-3047

CVE-2023-3047CRITICAL08 mar 2024

SQLi in TMT's Lockcell

48RISCO

GitHub PoC

Exploit for CVE-2024-22393 Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.

CVE-2024-22393CRITICAL08 mar 2024

Apache Answer: Pixel Flood Attack by uploading the large pixel file

48RISCO

GitHub PoC

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.

CVE-2019-17225—08 mar 2024

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" i

23RISCO

GitHub PoC★ 39

hd3s5aa/CVE-2023-21674

CVE-2023-21674HIGHsob ataque07 mar 2024

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

83RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.