Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.930exploits catalogados

37.572CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 23.973GitHub PoC 15.478VulnCheck XDB 9.069Nuclei 4.426Metasploit 3.502✓ só verificadosrecentes populares risco

15.478 exploits

GitHub PoC★ 5

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

CVE-2023-5360—05 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISCO

GitHub PoC★ 9

Exploit for CVE-2023-37903

CVE-2023-37903CRITICAL05 nov 2023

Sandbox Escape in vm2

48RISCO

GitHub PoC

In this repository you will find the technical report of Nibbles, the exploit to abuse the CVE-2015-6967 and an autopwn tool in case you want to resolve the machine in HackTheBox

CVE-2015-6967—05 nov 2023

Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to

50RISCO

GitHub PoC

ayushx007/CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847HIGHsob ataque05 nov 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

GitHub PoC★ 17

Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

CVE-2023-3452CRITICAL05 nov 2023

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

63RISCO

GitHub PoC★ 3

This is an exploit file which is used to check CVE-2021-21716 vulnerability

CVE-2023-21716CRITICAL04 nov 2023

Microsoft Word Remote Code Execution Vulnerability

70RISCO

GitHub PoC★ 40

evkl1d/CVE-2023-46604

CVE-2023-46604CRITICALsob ataqueransomware04 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

GitHub PoC★ 126

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

CVE-2023-46604CRITICALsob ataqueransomware03 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

GitHub PoC★ 3

An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs

CVE-2023-46747CRITICALsob ataqueransomware03 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISCO

GitHub PoC★ 7

An Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS routers

CVE-2023-20198CRITICALsob ataque03 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC

Wordpress CVE-2023-5360

CVE-2023-5360—03 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISCO

GitHub PoC★ 10

Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: CVE-2023-5360.

CVE-2023-5360—02 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RISCO

GitHub PoC

sajaljat/CVE-2023-46980

CVE-2023-46980CRITICAL02 nov 2023

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privile

48RISCO

GitHub PoC★ 8

Checker for CVE-2023-22518 vulnerability on Confluence

CVE-2023-22518CRITICALsob ataqueransomware02 nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISCO

GitHub PoC★ 7

nvansluis/test_cve-2023-46747

CVE-2023-46747CRITICALsob ataqueransomware02 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISCO

GitHub PoC

NestyF/SSH_Enum_CVE-2018-15473

CVE-2018-15473MEDIUM02 nov 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

GitHub PoC

jakedmurphy1/CVE-2023-46954

CVE-2023-46954CRITICAL02 nov 2023

SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacke

48RISCO

GitHub PoC★ 2

maniak-academy/Mitigate-CVE-2023-46747

CVE-2023-46747CRITICALsob ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISCO

GitHub PoC★ 208

exploit for f5-big-ip RCE cve-2023-46747

CVE-2023-46747CRITICALsob ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISCO

GitHub PoC

CVE-2023-46747 Criticle Auth Bypass

CVE-2023-46747CRITICALsob ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RISCO

GitHub PoC

SideCopy APT Group exploits CVE-2023-38831

CVE-2023-38831HIGHsob ataqueransomware01 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

GitHub PoC★ 1

A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab

CVE-2021-22205CRITICALsob ataqueransomware01 nov 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

GitHub PoC★ 61

Improper Authorization Vulnerability in Confluence Data Center and Server

CVE-2023-22518CRITICALsob ataqueransomware31 out 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISCO

GitHub PoC★ 14

BoltWire v6.03 vulnerable to "Improper Access Control"

CVE-2023-46501CRITICAL31 out 2023

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view a

48RISCO

GitHub PoC

4xolotl/CVE-2018-15473

CVE-2018-15473MEDIUM31 out 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

GitHub PoC★ 1

EXPLOIT FOR CVE-2014-6271

CVE-2014-6271CRITICALsob ataque31 out 2023

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

GitHub PoC

jetty /CVE-2021-28164/분석 및 결과

CVE-2021-28164MEDIUM31 out 2023

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contai

70RISCO

GitHub PoC

CVE-2023-27524

CVE-2023-27524HIGHsob ataque30 out 2023

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RISCO

GitHub PoC

longitudes de código para desencadenar esta vulnerabilidad

CVE-2023-41064HIGHsob ataque30 out 2023

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1

83RISCO

GitHub PoC

CVE-2023-27524

CVE-2023-27524HIGHsob ataque30 out 2023

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.