Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.930exploits catalogados
37.572CVEs com exploração pública
24.695testados em laboratório
15.478 exploits
GitHub PoC2
a Proof of Concept of cve-2021-43226,stack overflow in Windows driver clfs.sys
CVE-2021-43226HIGHsob ataqueransomware30 out 2023
Windows Common Log File System Driver Elevation of Privilege Vulnerability
71RISCO
abrir
GitHub PoC
longitudes de código para desencadenar esta vulnerabilidad
CVE-2023-41064HIGHsob ataque30 out 2023
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1
83RISCO
abrir
GitHub PoC3
Joomla Unauthorized Access Vulnerability
CVE-2023-23752MEDIUMsob ataque30 out 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir
GitHub PoC
CVE-2009-3103 ms09-050
CVE-2009-310329 out 2023
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISCO
abrir
GitHub PoC10
An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability
CVE-2023-4966CRITICALsob ataqueransomware29 out 2023
Unauthenticated sensitive information disclosure
100RISCO
abrir
GitHub PoC
Demonstration of CVE-2022-31692 authorization bypass in Spring Security
CVE-2022-31692CRITICAL29 out 2023
Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass v
48RISCO
abrir
GitHub PoC2
CVE-2023-33246 - Apache RocketMQ config RCE
CVE-2023-33246CRITICALsob ataque28 out 2023
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RISCO
abrir
GitHub PoC
This is a POC for CVE-2022-22963
CVE-2022-22963CRITICALsob ataque28 out 2023
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RISCO
abrir
GitHub PoC5
Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation
CVE-2023-4966CRITICALsob ataqueransomware28 out 2023
Unauthenticated sensitive information disclosure
100RISCO
abrir
GitHub PoC
detect bruteforce using for cve-2021-34527
CVE-2021-34527HIGHsob ataqueransomware28 out 2023
Windows Print Spooler Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC8
Proof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit
CVE-2023-4911HIGHsob ataque28 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
GitHub PoC
nhuynhuy/cve-2017-11882
CVE-2017-11882HIGHsob ataqueransomware28 out 2023
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC8
MosaedH/CVE-2022-32548-RCE-POC
CVE-2022-32548CRITICAL27 out 2023
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin
60RISCO
abrir
GitHub PoC5
Stack-Overflow on Citrix
CVE-2023-3519CRITICALsob ataqueransomware27 out 2023
Unauthenticated remote code execution
100RISCO
abrir
GitHub PoC1
CVE-2023-22515
CVE-2023-22515CRITICALsob ataqueransomware27 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC
CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit
CVE-2023-4966CRITICALsob ataqueransomware27 out 2023
Unauthenticated sensitive information disclosure
100RISCO
abrir
GitHub PoC13
phankz/Worpress-CVE-2023-5360
CVE-2023-536026 out 2023
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
60RISCO
abrir
GitHub PoC
h1n4mx0/Research-CVE-2016-5195
CVE-2016-5195HIGHsob ataque26 out 2023
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir
GitHub PoC28
CVE-2023-46604
CVE-2023-46604CRITICALsob ataqueransomware26 out 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISCO
abrir
GitHub PoC3
PoC and Writeup for CVE-2023-46404.
CVE-2023-46404CRITICAL26 out 2023
PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping
48RISCO
abrir
GitHub PoC
h1n4mx0z/Research-CVE-2016-5195
CVE-2016-5195HIGHsob ataque26 out 2023
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir
GitHub PoC
CVE-2023-5360
CVE-2023-536026 out 2023
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
60RISCO
abrir
GitHub PoC
katseyres2/CVE-2021-43798
CVE-2021-43798HIGHsob ataque26 out 2023
Grafana path traversal
100RISCO
abrir
GitHub PoC4
This script exploits CVE-2023-23397, a Zero-Day vulnerability in Microsoft Outlook, allowing the generation of malicious emails for testing and educational purposes.
CVE-2023-23397CRITICALsob ataque26 out 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC2
ReToCode/golang-CVE-2023-44487
CVE-2023-44487HIGHsob ataque25 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
GitHub PoC8
Proof Of Concept for te NetScaler Vuln
CVE-2023-4966CRITICALsob ataqueransomware25 out 2023
Unauthenticated sensitive information disclosure
100RISCO
abrir
GitHub PoC1
IceBreakerCode/CVE-2023-4966
CVE-2023-4966CRITICALsob ataqueransomware25 out 2023
Unauthenticated sensitive information disclosure
100RISCO
abrir
GitHub PoC11
Citrix CVE-2023-4966 from assetnote modified for parallel and file handling
CVE-2023-4966CRITICALsob ataqueransomware25 out 2023
Unauthenticated sensitive information disclosure
100RISCO
abrir
GitHub PoC
Docs on the Vulnerability CVE-2019-1663 (Cisco Routers)
CVE-2019-1663CRITICAL25 out 2023
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISCO
abrir
GitHub PoC
CVE-2019-10149
CVE-2019-10149CRITICALsob ataque25 out 2023
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(
100RISCO
abrir
anteriorpágina 305 / 516próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.