Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.951exploits catalogados
34.636CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.662GitHub PoC 13.736VulnCheck XDB 8.410Nuclei 4.233Metasploit 3.467✓ só verificadosrecentespopularesrisco
13.727 exploits
GitHub PoC★ 785
CVE-2023-38831 winrar exploit generator
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 205
Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISCO
abrir ↗GitHub PoC★ 91
lazy way to create CVE-2023-38831 winrar file for testing
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 7
CVE-2023-38035 Recon oriented exploit, extract company name contact information
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RISCO
abrir ↗GitHub PoC★ 12
PHP CGI Argument Injection.
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RISCO
abrir ↗GitHub PoC★ 243
Wh04m1001/CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISCO
abrir ↗GitHub PoC
Lab environment to test CVE-2023-25725
HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situatio
48RISCO
abrir ↗GitHub PoC★ 40
Ivanti Sentry CVE-2023-38035
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RISCO
abrir ↗GitHub PoC★ 1
Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2
Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh
60RISCO
abrir ↗GitHub PoC★ 2
CVE-2023-36874 Proof of Concept
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISCO
abrir ↗GitHub PoC★ 79
This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Windows Error Reporting (WER) component.
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISCO
abrir ↗GitHub PoC
Polkit 0.105-26 0.117-2 - Local Privilege Escalation
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir ↗GitHub PoC
CVE-2021-34527 PrintNightmare PoC
Windows Print Spooler Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC
python3 version of the CVE-2019-9978 exploit
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio
100RISCO
abrir ↗GitHub PoC
Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation'
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
100RISCO
abrir ↗GitHub PoC
h4ck0rman/CVE-2019-15107
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗GitHub PoC
LearnPress Plugin < 4.2.0 - Unauthenticated LFI Description
WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion
63RISCO
abrir ↗GitHub PoC★ 2
Exploit de reverseshell para desserialização em NodeJs (CVE-2017-5941)
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() fu
35RISCO
abrir ↗GitHub PoC
LearnPress Plugin < 4.2.0 - Unauthenticated SQLi
WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
63RISCO
abrir ↗GitHub PoC★ 2
Python rewrite of the POC for CVE-2023-34634
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .green
38RISCO
abrir ↗GitHub PoC★ 9
A PoC exploit for CVE-2018-9995 - DVR Authentication Bypass
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISCO
abrir ↗GitHub PoC
Ivanti Avalanche v6.4.0.0 RCE POC
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup
78RISCO
abrir ↗GitHub PoC
tianstcht/CVE-2023-2033
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corr
83RISCO
abrir ↗GitHub PoC★ 27
3tternp/CVE-2023-21554
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
85RISCO
abrir ↗GitHub PoC
asepsaepdin/CVE-2022-21907
HTTP Protocol Stack Remote Code Execution Vulnerability
70RISCO
abrir ↗GitHub PoC★ 5
PoC exploit for file upload vulnerability in BoidCMS version <=2.0.0
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header t
50RISCO
abrir ↗GitHub PoC
GitHub repository for CVE-2023-3460 POC
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISCO
abrir ↗GitHub PoC★ 130
mistymntncop/CVE-2023-3079
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr
83RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.