Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

13.727 exploits

GitHub PoC★ 13

Quick test for CVE-2023-26025 behaviours

CVE-2023-36025HIGHsob ataque17 nov 2023

Windows SmartScreen Security Feature Bypass Vulnerability

93RISCO

abrir ↗

GitHub PoC★ 52

exploit for cve-2023-47246 SysAid RCE (shell upload)

CVE-2023-47246CRITICALsob ataqueransomware17 nov 2023

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f

100RISCO

abrir ↗

GitHub PoC★ 64

CVE-2023-20198 Exploit PoC

CVE-2023-20198CRITICALsob ataque16 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

abrir ↗

GitHub PoC

SynixCyberCrimeMY CVE Exploiter By SamuraiMelayu1337 & ?/h4zzzzzz.scc

CVE-2022-29464CRITICALsob ataqueransomware16 nov 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2023-46604环境复现包

CVE-2023-46604CRITICALsob ataqueransomware16 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC

Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)

CVE-2023-36845CRITICALsob ataque15 nov 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISCO

abrir ↗

GitHub PoC

POC repo for CVE-2023-46604

CVE-2023-46604CRITICALsob ataqueransomware15 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC★ 4

WinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572漏洞复现

CVE-2023-38831HIGHsob ataqueransomware15 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

GitHub PoC★ 2

An improved POC exploit based on the reported CVE on exploitdb

CVE-2023-32707HIGH14 nov 2023

‘edit_user’ Capability Privilege Escalation

78RISCO

abrir ↗

GitHub PoC

NataliSemi/-CVE-2022-44268

CVE-2022-44268MEDIUM14 nov 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RISCO

abrir ↗

GitHub PoC★ 3

MrR0b0t19/CVE-2023-41064

CVE-2023-41064HIGHsob ataque13 nov 2023

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1

76RISCO

abrir ↗

GitHub PoC

Обнаружение эксплойта CVE-2023-28252

CVE-2023-28252HIGHsob ataqueransomware13 nov 2023

Windows Common Log File System Driver Elevation of Privilege Vulnerability

98RISCO

abrir ↗

GitHub PoC

Log4j Vulnerability RCE - CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware13 nov 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC

Spring4Shell Vulnerability RCE - CVE-2022-22965

CVE-2022-22965CRITICALsob ataque12 nov 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

GitHub PoC★ 18

This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol.

CVE-2023-46604CRITICALsob ataqueransomware12 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC

A simple exploit for CVE-2019-2725.

CVE-2019-2725HIGHsob ataqueransomware11 nov 2023

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISCO

abrir ↗

GitHub PoC★ 3

huiwen-yayaya/CVE-2023-4863

CVE-2023-4863HIGHsob ataque11 nov 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

GitHub PoC

ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022—11 nov 2023

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands

23RISCO

abrir ↗

GitHub PoC★ 16

Examples for Implementing cve-2023-44487 ( HTTP/2 Rapid Reset Attack ) Concept

CVE-2023-44487HIGHsob ataque10 nov 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RISCO

abrir ↗

GitHub PoC

exp

CVE-2023-34039CRITICAL10 nov 2023

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g

75RISCO

abrir ↗

GitHub PoC

Takeover of Oracle WebLogic Server

CVE-2020-14882CRITICALsob ataque09 nov 2023

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

abrir ↗

GitHub PoC

olingo99/CVE-2019-15107

CVE-2019-15107CRITICALsob ataqueransomware09 nov 2023

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

abrir ↗

GitHub PoC★ 23

配合 CVE-2023-22515 后台上传jar包实现RCE

CVE-2023-22515CRITICALsob ataqueransomware09 nov 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RISCO

abrir ↗

GitHub PoC★ 45

Takeover Account OpenSSH

CVE-2023-38408CRITICAL09 nov 2023

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

70RISCO

abrir ↗

GitHub PoC★ 3

h3x3h0g/ActiveMQ-RCE-CVE-2023-46604-Write-up

CVE-2023-46604CRITICALsob ataqueransomware09 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC★ 5

Exploit CVE-2023-22518

CVE-2023-22518CRITICALsob ataqueransomware09 nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISCO

abrir ↗

GitHub PoC

cve-2019-9978 PoC

CVE-2019-9978MEDIUMsob ataque09 nov 2023

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio

100RISCO

abrir ↗

GitHub PoC★ 1

Looney Tunables CVE-2023-4911

CVE-2023-4911HIGHsob ataque08 nov 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RISCO

abrir ↗

GitHub PoC★ 2

Exploitation of the CVE-2021-3560 polkit vulnerability

CVE-2021-3560HIGHsob ataque08 nov 2023

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISCO

abrir ↗

GitHub PoC★ 2

Server Broken Access Control in Confluence - CVE-2023-22515

CVE-2023-22515CRITICALsob ataqueransomware08 nov 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.