Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
76.008exploits catalogados
34.638CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentespopularesrisco
13.743 exploits
GitHub PoC★ 1
Exploring CVE-2021-42013, using Suricata and OpenVAS to gather info
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
abrir ↗GitHub PoC
overgrowncarrot1/CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti
60RISCO
abrir ↗GitHub PoC★ 69
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗GitHub PoC★ 57
Openfire Console Authentication Bypass Vulnerability with RCE plugin
Openfire administration console authentication bypass
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2023-24078 for FuguHub / BarracudaDrive
Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c
53RISCO
abrir ↗GitHub PoC★ 7
CVE-2023-24078 for FuguHub / BarracudaDrive
Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c
53RISCO
abrir ↗GitHub PoC★ 23
FortiOS 管理界面中的堆内存下溢导致远程代码执行
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0
53RISCO
abrir ↗GitHub PoC★ 4
Joomla未授权访问漏洞
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗GitHub PoC★ 6
Repository with everything I have tracking the impact of MOVEit CVE-2023-34362
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.
100RISCO
abrir ↗GitHub PoC★ 27
POC FortiOS SSL-VPN buffer overflow vulnerability
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RISCO
abrir ↗GitHub PoC★ 134
Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RISCO
abrir ↗GitHub PoC
CVE-2023-34600
Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.
53RISCO
abrir ↗GitHub PoC★ 15
SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassin
85RISCO
abrir ↗GitHub PoC★ 2
5rGJ5aCh5oCq5YW9/CVE-2023-32315exp
Openfire administration console authentication bypass
100RISCO
abrir ↗GitHub PoC
Exploit for CVE-2022-44136 for chcking security of your site
Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).
48RISCO
abrir ↗GitHub PoC
Samba 3.0.20
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISCO
abrir ↗GitHub PoC
ohnonoyesyes/CVE-2023-32315
Openfire administration console authentication bypass
100RISCO
abrir ↗GitHub PoC★ 1
y0d3n/CVE-2014-0094
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via t
60RISCO
abrir ↗GitHub PoC★ 6
VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware
100RISCO
abrir ↗GitHub PoC★ 2
python program to exploit CVE-2023-21716
Microsoft Word Remote Code Execution Vulnerability
70RISCO
abrir ↗GitHub PoC★ 229
VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware
100RISCO
abrir ↗GitHub PoC
Python 2.7
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir ↗GitHub PoC
Sonatype Nexus 3.21.01 - Remote Code Execution (Authenticated - Updated)
Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
100RISCO
abrir ↗GitHub PoC
Proof of Concept for vulnerability CVE-2023-2986 in 'Abandoned Cart Lite for WooCommerce' Plugin in WordPress in Python Version
Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass
60RISCO
abrir ↗GitHub PoC★ 3
A script, written in golang. POC for CVE-2023-25157
Unfiltered SQL Injection Vulnerabilities in Geoserver
85RISCO
abrir ↗GitHub PoC★ 64
CVE-2023-34362: MOVEit Transfer Unauthenticated RCE
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.
100RISCO
abrir ↗GitHub PoC★ 77
CVE-2023-20963 PoC (Android WorkSource parcel/unparcel logic mismatch)
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional
71RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.