Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.842exploits catalogados

37.493CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 23.901GitHub PoC 15.465VulnCheck XDB 9.066Nuclei 4.426Metasploit 3.502✓ só verificadosrecentes populares risco

15.465 exploits

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2019-0708CRITICALsob ataqueransomware28 mar 2024

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISCO

GitHub PoC★ 1

Check CVE-2023-42789

CVE-2023-42789CRITICAL28 mar 2024

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0

48RISCO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2012-0003HIGH28 mar 2024

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows

68RISCO

GitHub PoC★ 5

it's a CVE-2023-28229 (Patched), but feel free to use it for check any outdated software or reseach

CVE-2023-28229HIGHsob ataque27 mar 2024

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

71RISCO

GitHub PoC

ticofookfook/CVE-2021-43798

CVE-2021-43798HIGHsob ataque27 mar 2024

Grafana path traversal

100RISCO

GitHub PoC★ 5

Unauthenticated Remote Code Execution (RCE) Vulnerability in WWBNIndex Plugin of AVideo Platform from 12.4 to 14.2

CVE-2024-31819CRITICAL27 mar 2024

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath

68RISCO

GitHub PoC

NMinhTrung/LIFERAY-CVE-2020-7961

CVE-2020-7961CRITICALsob ataque26 mar 2024

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c

100RISCO

GitHub PoC★ 10

Exploit Toolkit for Adobe ColdFusion CVE-2024-20767 Vulnerability

CVE-2024-20767HIGHsob ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RISCO

GitHub PoC★ 34

Exploit for CVE-2024-20767 - Adobe ColdFusion

CVE-2024-20767HIGHsob ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RISCO

GitHub PoC★ 1

Proof of Concept for CVE-2024-20767. Arbitrary file read from Adobe ColdFusion

CVE-2024-20767HIGHsob ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RISCO

GitHub PoC★ 3

Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using the Log4J vulnerability (CVE-2021-44228). I examined teh amount of endpoints communicating with the server and knowing jnidi as a common in the vulnerbilty found it in clear text

CVE-2021-44228CRITICALsob ataqueransomware26 mar 2024

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 1

404fu/CVE-2022-26134-POC

CVE-2022-26134CRITICALsob ataqueransomware26 mar 2024

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

GitHub PoC★ 9

evil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)

CVE-2023-38831HIGHsob ataqueransomware25 mar 2024

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

GitHub PoC

Madan301/CVE-2024-2054

CVE-2024-2054CRITICAL25 mar 2024

Artica Proxy Unauthenticated PHP Deserialization Vulnerability

85RISCO

GitHub PoC★ 2

Part of my cybersecurity thesis consists in exploring and exploiting this vulnerability.

CVE-2021-3560HIGHsob ataque24 mar 2024

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISCO

GitHub PoC

CharonDefalt/WordPress--CVE-2022-21661

CVE-2022-21661HIGH24 mar 2024

SQL injection in WordPress

78RISCO

GitHub PoC★ 13

0xyassine/CVE-2023-40028

CVE-2023-40028MEDIUM23 mar 2024

Arbitrary file read via symlinks in Ghost

45RISCO

GitHub PoC★ 1

exploit CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware23 mar 2024

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

Nhom6KTLT/CVE-2010-3124

CVE-2010-3124—22 mar 2024

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possib

28RISCO

GitHub PoC★ 2

XenoM0rph97/CVE-2024-30896

CVE-2024-30896CRITICAL22 mar 2024

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows aut

48RISCO

GitHub PoC★ 1

sxyrxyy/CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass

CVE-2024-1709CRITICALsob ataqueransomware22 mar 2024

Authentication bypass using an alternate path or channel

100RISCO

GitHub PoC

Practice POC scripting in Tryhackme’s intro poc scripting room (For Linux)

CVE-2012-2982—21 mar 2024

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RISCO

GitHub PoC

JolynNgSC/Zerologon_CVE-2020-1472

CVE-2020-1472MEDIUMsob ataqueransomware21 mar 2024

Netlogon Elevation of Privilege Vulnerability

100RISCO

GitHub PoC★ 130

Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation

CVE-2023-36424HIGHsob ataque21 mar 2024

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISCO

GitHub PoC★ 1

Lilly-dox/Exploit-CVE-2023-22518

CVE-2023-22518CRITICALsob ataqueransomware21 mar 2024

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISCO

GitHub PoC★ 8

POC code according to trendmicro's research

CVE-2024-21412HIGHsob ataqueransomware21 mar 2024

Internet Shortcut Files Security Feature Bypass Vulnerability

93RISCO

GitHub PoC★ 6

it's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach

CVE-2023-28252HIGHsob ataqueransomware21 mar 2024

Windows Common Log File System Driver Elevation of Privilege Vulnerability

98RISCO

GitHub PoC★ 1

Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application.

CVE-2023-23397CRITICALsob ataque20 mar 2024

Microsoft Outlook Elevation of Privilege Vulnerability

100RISCO

GitHub PoC★ 2.448

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

CVE-2024-1086HIGHsob ataqueransomware20 mar 2024

Use-after-free in Linux kernel's netfilter: nf_tables component

76RISCO

GitHub PoC★ 1

A vuln about csapp.

CVE-2024-28515CRITICAL19 mar 2024

Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary cod

48RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.