Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados
34.597CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentespopularesrisco
13.727 exploits
GitHub PoC★ 1
TP-Link Archer AX21 - Unauthenticated Command Injection [Loader]
CVE-2023-1389HIGHsob ataque25 dez 2023
TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i
100RISCO
abrir ↗
GitHub PoC★ 13
dust-life/CVE-2019-18935-memShell
CVE-2019-18935CRITICALsob ataqueransomware25 dez 2023
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISCO
abrir ↗
GitHub PoC
CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker
CVE-2023-46604CRITICALsob ataqueransomware23 dez 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISCO
abrir ↗
GitHub PoC★ 2
puckiestyle/CVE-2023-4911
CVE-2023-4911HIGHsob ataque23 dez 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir ↗
GitHub PoC★ 18
puckiestyle/CVE-2023-0386
CVE-2023-0386HIGHsob ataque23 dez 2023
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa
86RISCO
abrir ↗
GitHub PoC★ 2
Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key
CVE-2016-4437CRITICALsob ataque22 dez 2023
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack
100RISCO
abrir ↗
GitHub PoC★ 4
Guillaume-Risch/cve-2023-29357-Sharepoint
CVE-2023-29357CRITICALsob ataqueransomware22 dez 2023
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 16
CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that leads to Remote Command Execution via crafted docx document.
CVE-2023-50254CRITICAL22 dez 2023
Deepin Reader RCE vulnerability due to a design flaw
48RISCO
abrir ↗
GitHub PoC★ 13
substing/CVE-2020-24186_reverse_shell_upload
CVE-2020-24186CRITICAL21 dez 2023
A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo
85RISCO
abrir ↗
GitHub PoC★ 1
Directory Traversal and Arbitrary File Read on Grafana
CVE-2021-43798HIGHsob ataque21 dez 2023
Grafana path traversal
100RISCO
abrir ↗
GitHub PoC
That-Guy-Steve/CVE-2018-1133-Exploit
CVE-2018-1133—20 dez 2023
An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code exec
35RISCO
abrir ↗
GitHub PoC★ 5
Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)
CVE-2009-3103—20 dez 2023
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISCO
abrir ↗
GitHub PoC★ 25
This tool calculates tricky canonical huffman histogram for CVE-2023-4863.
CVE-2023-4863HIGHsob ataque19 dez 2023
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISCO
abrir ↗
GitHub PoC
OwnCloud CVE-2023-49103
CVE-2023-49103CRITICALsob ataque19 dez 2023
An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies
100RISCO
abrir ↗
GitHub PoC
Binaries for "CVE-2023-23752"
CVE-2023-23752MEDIUMsob ataque19 dez 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
GitHub PoC★ 1
Arszilla/CVE-2023-6538
CVE-2023-6538HIGH18 dez 2023
System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.
41RISCO
abrir ↗
GitHub PoC
An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints within Joomla! CMS versions 4.0.0 through 4.2.7. This vulnerability could be exploited by attackers to gain unauthorized access to sensitive information or perform unauthorized actions.
CVE-2023-23752MEDIUMsob ataque18 dez 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
GitHub PoC
Repository that contains a CVE-2020-11651 Exploit updated to work with the latest versions of python.
CVE-2020-11651CRITICALsob ataque18 dez 2023
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla
100RISCO
abrir ↗
GitHub PoC★ 54
LiveOverflow/webp-CVE-2023-4863
CVE-2023-4863HIGHsob ataque18 dez 2023
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISCO
abrir ↗
GitHub PoC
An implementation of a proof-of-concept for CVE-2018-5767
CVE-2018-5767—18 dez 2023
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code
35RISCO
abrir ↗
GitHub PoC
jee web project with log4shell (CVE-2021-44228) vulnerability
CVE-2021-44228CRITICALsob ataqueransomware18 dez 2023
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 2
Simulates CVE-2023-4966 Citrix Bleed overread bug
CVE-2023-4966CRITICALsob ataqueransomware16 dez 2023
Unauthenticated sensitive information disclosure
100RISCO
abrir ↗
GitHub PoC
dcm2406/CVE-2023-46604
CVE-2023-46604CRITICALsob ataqueransomware16 dez 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISCO
abrir ↗
GitHub PoC
markyu0401/CVE-2021-3560-Polkit-Privilege-Escalation
CVE-2021-3560HIGHsob ataque15 dez 2023
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir ↗
GitHub PoC
ZhiQiAnSecFork/DirtyCOW_CVE-2016-5195
CVE-2016-5195HIGHsob ataque15 dez 2023
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir ↗
GitHub PoC
Remote Code Execution exploit for PrimeFaces 5.x - EL Injection (CVE-2017-1000486)
CVE-2017-1000486CRITICALsob ataque15 dez 2023
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISCO
abrir ↗
GitHub PoC★ 13
A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass
CVE-2023-32315HIGHsob ataque15 dez 2023
Openfire administration console authentication bypass
100RISCO
abrir ↗
GitHub PoC
ZhiQiAnSecFork/cve-2017-16995
CVE-2017-16995—15 dez 2023
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial
50RISCO
abrir ↗
GitHub PoC★ 2
SQL Injection in 3CX CRM Integration
CVE-2023-49954CRITICAL14 dez 2023
The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search stri
48RISCO
abrir ↗
GitHub PoC
CVE-2022-4047 poc
CVE-2022-4047CRITICAL14 dez 2023
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
48RISCO
abrir ↗
← anteriorpágina 247 / 458próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.