Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.646exploits catalogados

37.382CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 23.825GitHub PoC 15.392VulnCheck XDB 9.029Nuclei 4.416Metasploit 3.502✓ só verificadosrecentes populares risco

15.392 exploits

GitHub PoC

DS.DownloadList <= 1.3 - Unauthenticated PHP Object Injection

CVE-2024-50507CRITICAL16 dez 2024

WordPress DS.DownloadList plugin <= 1.3 - PHP Object Injection vulnerability

48RISCO

abrir ↗

GitHub PoC★ 21

LLfam/CVE-2024-1086

CVE-2024-1086HIGHsob ataqueransomware16 dez 2024

Use-after-free in Linux kernel's netfilter: nf_tables component

76RISCO

abrir ↗

GitHub PoC★ 14

A short scraper looking for a POC of CVE-2024-49112

CVE-2024-49112CRITICAL16 dez 2024

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC

t0mmy4/CVE-2019-12725-modified-exp

CVE-2019-12725—16 dez 2024

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RISCO

abrir ↗

GitHub PoC

redspy-sec/CVE-2021-41773

CVE-2021-41773HIGHsob ataqueransomware16 dez 2024

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

Rahul-Thakur7/CVE-2023-21554

CVE-2023-21554CRITICAL16 dez 2024

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

85RISCO

abrir ↗

GitHub PoC★ 4

Automated Exploit Tool for Grafana CVE-2021-43798: Scanning common files that contain juicy informations and extracting SSH keys from compromised users.

CVE-2021-43798HIGHsob ataque14 dez 2024

Grafana path traversal

100RISCO

abrir ↗

GitHub PoC

Improved version of PikaChu CVE

CVE-2017-12617HIGHsob ataque13 dez 2024

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RISCO

abrir ↗

GitHub PoC★ 8

CVE-2024-55875 | GHSA-7mj5-hjjj-8rgw | http4k first CVE

CVE-2024-55875CRITICAL13 dez 2024

http4k has a potential XXE (XML External Entity Injection) vulnerability

48RISCO

abrir ↗

GitHub PoC★ 96

A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, which can be exploited to perform path traversal and malicious file uploads.

CVE-2024-53677CRITICAL13 dez 2024

Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks

70RISCO

abrir ↗

GitHub PoC

Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

CVE-2024-9290CRITICAL13 dez 2024

Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

48RISCO

abrir ↗

GitHub PoC

sudlit/CVE-2023-40028

CVE-2023-40028MEDIUM13 dez 2024

Arbitrary file read via symlinks in Ghost

45RISCO

abrir ↗

GitHub PoC★ 4

666asd/CVE-2024-23653

CVE-2024-23653CRITICAL13 dez 2024

BuildKit interactive containers API does not validate entitlements check

48RISCO

abrir ↗

GitHub PoC

tlavi00/CVE-2018-7750

CVE-2018-7750—13 dez 2024

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x

28RISCO

abrir ↗

GitHub PoC

CVE to CTF FP

CVE-2022-22963CRITICALsob ataque13 dez 2024

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

abrir ↗

GitHub PoC★ 4

exploit CVE-2024-38475(mod_rewrite weakness with filesystem path matching)

CVE-2024-38475CRITICALsob ataque12 dez 2024

Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

100RISCO

abrir ↗

GitHub PoC★ 13

CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system.

CVE-2023-40028MEDIUM12 dez 2024

Arbitrary file read via symlinks in Ghost

45RISCO

abrir ↗

GitHub PoC

writeup cve-2024-42327

CVE-2024-42327CRITICAL12 dez 2024

SQL injection in user.get API

70RISCO

abrir ↗

GitHub PoC

Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

CVE-2024-10124CRITICAL12 dez 2024

Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

60RISCO

abrir ↗

GitHub PoC★ 9

s2-067(CVE-2024-53677)

CVE-2024-53677CRITICAL12 dez 2024

Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks

70RISCO

abrir ↗

GitHub PoC★ 2

Palo Alto Networks PAN-OS(CVE-2024-9474) POC

CVE-2024-9474MEDIUMsob ataqueransomware11 dez 2024

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RISCO

abrir ↗

GitHub PoC★ 8

This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, including payload creation, chunked delivery, and seamless command execution.

CVE-2024-0012CRITICALsob ataqueransomware11 dez 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RISCO

abrir ↗

GitHub PoC

This repo contains both the exploit and the explaination of how this vulnerability is exploited

CVE-2019-18634—11 dez 2024

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISCO

abrir ↗

GitHub PoC★ 25

Cleo Unrestricted file upload and download PoC (CVE-2024-50623)

CVE-2024-50623CRITICALsob ataqueransomware11 dez 2024

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file up

100RISCO

abrir ↗

GitHub PoC

itform-fr/Zabbix---CVE-2024-42327

CVE-2024-42327CRITICAL11 dez 2024

SQL injection in user.get API

70RISCO

abrir ↗

GitHub PoC★ 1

KiviCare – Clinic & Patient Management System (EHR) WordPress Plugin Unauthenticated SQL Injection PoC

CVE-2024-11728HIGH11 dez 2024

KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection

61RISCO

abrir ↗

GitHub PoC

Cái này dựng lên với mục đích cho ae tham khảo, chê thì đừng có xem. :))))

CVE-2023-3460—11 dez 2024

Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

60RISCO

abrir ↗

GitHub PoC

An example of a repo that would make use of the CVE-2024-32002

CVE-2024-32002CRITICAL11 dez 2024

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISCO

abrir ↗

GitHub PoC★ 1

Privilege escaltion exploit script for Boardlight machine on HackTheBox. I had access as the Larissa user and ran this script from the /tmp directory; script has been adjusted accordingly.

CVE-2022-37706HIGH10 dez 2024

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and th

56RISCO

abrir ↗

GitHub PoC★ 1

CVE-2024-55557

CVE-2024-55557CRITICAL10 dez 2024

ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credenti

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.