Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

13.727 exploits

GitHub PoC★ 4

This script exploits CVE-2023-23397, a Zero-Day vulnerability in Microsoft Outlook, allowing the generation of malicious emails for testing and educational purposes.

CVE-2023-23397CRITICALsob ataque26 out 2023

Microsoft Outlook Elevation of Privilege Vulnerability

100RISCO

GitHub PoC★ 3

PoC and Writeup for CVE-2023-46404.

CVE-2023-46404CRITICAL26 out 2023

PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping

48RISCO

GitHub PoC

CVE-2019-10149

CVE-2019-10149CRITICALsob ataque25 out 2023

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RISCO

GitHub PoC★ 2

ReToCode/golang-CVE-2023-44487

CVE-2023-44487HIGHsob ataque25 out 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RISCO

GitHub PoC★ 1

IceBreakerCode/CVE-2023-4966

CVE-2023-4966CRITICALsob ataqueransomware25 out 2023

Unauthenticated sensitive information disclosure

100RISCO

GitHub PoC

Bash script to check if kernel is vulnerable

CVE-2022-0847HIGHsob ataque25 out 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

GitHub PoC★ 18

Looney Tunables Local privilege escalation (CVE-2023-4911) workshop

CVE-2023-4911HIGHsob ataque25 out 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RISCO

GitHub PoC★ 8

Proof Of Concept for te NetScaler Vuln

CVE-2023-4966CRITICALsob ataqueransomware25 out 2023

Unauthenticated sensitive information disclosure

100RISCO

GitHub PoC

Docs on the Vulnerability CVE-2019-1663 (Cisco Routers)

CVE-2019-1663CRITICAL25 out 2023

Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

85RISCO

GitHub PoC★ 11

Citrix CVE-2023-4966 from assetnote modified for parallel and file handling

CVE-2023-4966CRITICALsob ataqueransomware25 out 2023

Unauthenticated sensitive information disclosure

100RISCO

GitHub PoC★ 2

mr-r3b00t/CVE-2023-20198-IOS-XE-Scanner

CVE-2023-20198CRITICALsob ataque25 out 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC

A demo of the Log4Shell (CVE-2021-44228) vulnerability.

CVE-2021-44228CRITICALsob ataqueransomware25 out 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 1

IceBreakerCode/CVE-2023-20198

CVE-2023-20198CRITICALsob ataque25 out 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC

ohlawd/CVE-2023-20198

CVE-2023-20198CRITICALsob ataque25 out 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC★ 1

Exploit for CVE-2023-23752 (4.0.0 <= Joomla <= 4.2.7).

CVE-2023-23752MEDIUMsob ataque25 out 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

GitHub PoC★ 1

Check a target IP for CVE-2023-20198

CVE-2023-20198CRITICALsob ataque24 out 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC★ 1

A PoC and Exploit for CVE 2022-29464

CVE-2022-29464CRITICALsob ataqueransomware24 out 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISCO

GitHub PoC

hoanganh2k/cve-2018-5333

CVE-2018-5333—24 out 2023

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning

38RISCO

GitHub PoC★ 79

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

CVE-2023-4966CRITICALsob ataqueransomware24 out 2023

Unauthenticated sensitive information disclosure

100RISCO

GitHub PoC

CVE-2023-38831 is an RCE in WinRAR (<6.23)

CVE-2023-38831HIGHsob ataqueransomware24 out 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

GitHub PoC

r10lab/CVE-2022-23131

CVE-2022-23131CRITICALsob ataque24 out 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RISCO

GitHub PoC

Python script get image from Hikvision camera with CVE-2017-7921 vulnerability

CVE-2017-7921CRITICALsob ataque23 out 2023

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RISCO

GitHub PoC★ 112

Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver

CVE-2023-36802HIGHsob ataque23 out 2023

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

76RISCO

GitHub PoC★ 41

Cisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)

CVE-2023-20198CRITICALsob ataque23 out 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC★ 33

This is a webshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273

CVE-2023-20198CRITICALsob ataque23 out 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC★ 8

A PoC for CVE 2023-20198

CVE-2023-20198CRITICALsob ataque23 out 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC★ 41

CVE-2013-4786 Go exploitation tool

CVE-2013-4786—23 out 2023

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote

60RISCO

GitHub PoC

banyaksepuh/Mass-CVE-2021-3129-Scanner

CVE-2021-3129CRITICALsob ataqueransomware22 out 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

GitHub PoC★ 1

haingn/HIK-CVE-2021-36260-Exploit

CVE-2021-36260CRITICALsob ataque22 out 2023

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISCO

GitHub PoC★ 3

haingn/LoHongCam-CVE-2021-33044

CVE-2021-33044CRITICALsob ataque22 out 2023

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.