Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.930exploits catalogados

37.572CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 23.973GitHub PoC 15.478VulnCheck XDB 9.069Nuclei 4.426Metasploit 3.502✓ só verificadosrecentes populares risco

15.478 exploits

GitHub PoC★ 3

CVE-2006-2842 is a powerful scanner for bug bounty hunters and penetration testers to discover vulnerabilities in their web applications.

CVE-2006-2842—28 dez 2023

PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals i

50RISCO

abrir ↗

GitHub PoC

substing/CVE-2019-11447_reverse_shell_upload

CVE-2019-11447—28 dez 2023

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RISCO

abrir ↗

GitHub PoC★ 5

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-36025HIGHsob ataque28 dez 2023

Windows SmartScreen Security Feature Bypass Vulnerability

93RISCO

abrir ↗

GitHub PoC★ 1

CVE-2022-22963-poc

CVE-2022-22963CRITICALsob ataque28 dez 2023

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

abrir ↗

GitHub PoC

ducnorth2712/CVE-2023-23397

CVE-2023-23397CRITICALsob ataque28 dez 2023

Microsoft Outlook Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 13

Exploit for Microsoft SharePoint 2019

CVE-2023-24955HIGHsob ataqueransomware28 dez 2023

Microsoft SharePoint Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

vinnie1717/CVE-2023-48974

CVE-2023-48974CRITICAL28 dez 2023

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges

48RISCO

abrir ↗

GitHub PoC

DDayLuong/CVE-2021-3156

CVE-2021-3156HIGHsob ataque27 dez 2023

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

abrir ↗

GitHub PoC★ 4

motikan2010/CVE-2023-6553-PoC

CVE-2023-6553CRITICAL27 dez 2023

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

85RISCO

abrir ↗

GitHub PoC

POC +report note

CVE-2018-17552—27 dez 2023

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigat

60RISCO

abrir ↗

GitHub PoC

jee web project with sanitised log4shell (CVE-2021-44228) vulnerability

CVE-2021-44228CRITICALsob ataqueransomware27 dez 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC

DDayLuong/CVE-2019-18634

CVE-2019-18634—27 dez 2023

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISCO

abrir ↗

GitHub PoC★ 1

This is a exploit of CVE-2021-32305 a web vulnerability to command injection on search.php path, this exploit allows execute commands.

CVE-2021-32305—26 dez 2023

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RISCO

abrir ↗

GitHub PoC

kimstars/POC-CVE-2022-28117

CVE-2022-28117—26 dez 2023

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the ap

43RISCO

abrir ↗

GitHub PoC

tannlh/CVE-2018-20250

CVE-2018-20250HIGHsob ataqueransomware26 dez 2023

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISCO

abrir ↗

GitHub PoC★ 5

Exploit for Arbitrary File Read for CVE-2023-26360 - Adobe Coldfusion

CVE-2023-26360HIGHsob ataque26 dez 2023

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RISCO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2023-41892

CVE-2023-41892CRITICAL26 dez 2023

Craft CMS Remote Code Execution vulnerability

85RISCO

abrir ↗

GitHub PoC★ 1

MkJos/CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246CRITICALsob ataque26 dez 2023

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RISCO

abrir ↗

GitHub PoC★ 9

🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓

CVE-2021-4045CRITICAL26 dez 2023

TP-LINK Tapo C200 remote code execution vulnerability

70RISCO

abrir ↗

GitHub PoC★ 2

Exploit Development using python for CVE-2023-38831 (POC)

CVE-2023-38831HIGHsob ataqueransomware26 dez 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

GitHub PoC★ 1

Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration testing and ethical hacking. Developed and maintained by Mohamed Mounir Boudjema, this repository is crafted with a deep understanding of the evolving landscape of cybersecurity.

CVE-2023-6710MEDIUM25 dez 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RISCO

abrir ↗

GitHub PoC★ 12

dust-life/CVE-2019-18935-memShell

CVE-2019-18935CRITICALsob ataqueransomware25 dez 2023

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISCO

abrir ↗

GitHub PoC★ 2

Explore the depths of CVE-2023-6710 with our comprehensive Proof of Concept (PoC). This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks.

CVE-2023-6710MEDIUM25 dez 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RISCO

abrir ↗

GitHub PoC★ 1

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader]

CVE-2023-1389HIGHsob ataque25 dez 2023

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RISCO

abrir ↗

GitHub PoC★ 18

puckiestyle/CVE-2023-0386

CVE-2023-0386HIGHsob ataque23 dez 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISCO

abrir ↗

GitHub PoC★ 2

puckiestyle/CVE-2023-4911

CVE-2023-4911HIGHsob ataque23 dez 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RISCO

abrir ↗

GitHub PoC

CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker

CVE-2023-46604CRITICALsob ataqueransomware23 dez 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC★ 4

Guillaume-Risch/cve-2023-29357-Sharepoint

CVE-2023-29357CRITICALsob ataqueransomware22 dez 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 16

CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that leads to Remote Command Execution via crafted docx document.

CVE-2023-50254CRITICAL22 dez 2023

Deepin Reader RCE vulnerability due to a design flaw

48RISCO

abrir ↗

GitHub PoC★ 2

Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key

CVE-2016-4437CRITICALsob ataque22 dez 2023

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.