Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados
34.834CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentespopularesrisco
13.812 exploits
GitHub PoC★ 29
An eBPF detection program for CVE-2022-0847
CVE-2022-0847HIGHsob ataque05 jul 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗
GitHub PoC★ 3
Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE).
CVE-2022-26134CRITICALsob ataqueransomware05 jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
GitHub PoC★ 13
TheL1ghtVn/CVE-2022-30333-PoC
CVE-2022-30333HIGHsob ataqueransomware05 jul 2022
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o
100RISCO
abrir ↗
GitHub PoC
mq_notify: double sock_put()
CVE-2017-11176—05 jul 2022
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr
23RISCO
abrir ↗
GitHub PoC★ 2
EXP for Spring4Shell(CVE-2022-22965)
CVE-2022-22965CRITICALsob ataque05 jul 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir ↗
GitHub PoC★ 2
exp of CVE-2022-0847
CVE-2022-0847HIGHsob ataque05 jul 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗
GitHub PoC★ 5
Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability
CVE-2021-3156HIGHsob ataque04 jul 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir ↗
GitHub PoC★ 1
Atlassian, CVE-2022-26134 An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability.
CVE-2022-26134CRITICALsob ataqueransomware04 jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
GitHub PoC
CVE-2022-24706 POC exploit
CVE-2022-24706CRITICALsob ataque04 jul 2022
Remote Code Execution Vulnerability in Packaging
100RISCO
abrir ↗
GitHub PoC★ 30
POC exploit for CVE-2015-10141
CVE-2015-10141CRITICAL04 jul 2022
Xdebug Remote Debugger Unauthenticated OS Command Execution
63RISCO
abrir ↗
GitHub PoC
CVE-2022-1388, bypassing iControl REST authentication
CVE-2022-1388CRITICALsob ataqueransomware04 jul 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC
The above investigation of the ES file browser security weakness allows us to see the issue in its entirety
CVE-2019-6447—03 jul 2022
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi
50RISCO
abrir ↗
GitHub PoC★ 5
Ruby反序列化命令执行漏洞（CVE-2019-5420）-vulfocus通关版
CVE-2019-5420—02 jul 2022
A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th
60RISCO
abrir ↗
GitHub PoC★ 13
CVE-2022-2185 poc
CVE-2022-2185CRITICAL02 jul 2022
A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to
85RISCO
abrir ↗
GitHub PoC★ 1
PoC for exploiting CVE-2022-1388 on BIG IP F5
CVE-2022-1388CRITICALsob ataqueransomware01 jul 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC★ 4
Apache Tomcat DoS (CVE-2022-29885) Exploit
CVE-2022-29885—01 jul 2022
EncryptInterceptor does not provide complete protection on insecure networks
45RISCO
abrir ↗
GitHub PoC★ 5
Apache Tomcat CVE-2022-29885
CVE-2022-29885—30 jun 2022
EncryptInterceptor does not provide complete protection on insecure networks
45RISCO
abrir ↗
GitHub PoC
A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.
CVE-2022-0847HIGHsob ataque30 jun 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗
GitHub PoC★ 134
PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017
CVE-2021-23017—30 jun 2022
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t
35RISCO
abrir ↗
GitHub PoC★ 1
vesperp/CVE-2021-42237-SiteCore-XP
CVE-2021-42237CRITICALsob ataqueransomware30 jun 2022
Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it
100RISCO
abrir ↗
GitHub PoC★ 8
This is exploit of CVE-2022-30190 on PowerPoint.
CVE-2022-30190HIGHsob ataqueransomware29 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 41
CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34473CRITICALsob ataqueransomware29 jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
PoC for exploiting CVE-2022-26134 on Confluence
CVE-2022-26134CRITICALsob ataqueransomware29 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
GitHub PoC★ 5
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
CVE-2015-2291HIGHsob ataqueransomware28 jun 2022
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all
71RISCO
abrir ↗
GitHub PoC★ 1
Mass Exploit for CVE 2022-29464 on Carbon
CVE-2022-29464CRITICALsob ataqueransomware28 jun 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISCO
abrir ↗
GitHub PoC
A docker container vulnerable to Shellshock - CVE-2014-6271
CVE-2014-6271CRITICALsob ataque27 jun 2022
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗
GitHub PoC
CVE-2021-26855
CVE-2021-26855CRITICALsob ataqueransomware27 jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 9
ProxyLogon (CVE-2021-26855+CVE-2021-27065) Exchange Server RCE (SSRF->GetWebShell)
CVE-2021-26855CRITICALsob ataqueransomware27 jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 2
Follina (CVE-2022-30190) proof-of-concept
CVE-2022-30190HIGHsob ataqueransomware27 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 85
Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
CVE-2021-21551HIGHsob ataque25 jun 2022
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile
98RISCO
abrir ↗
← anteriorpágina 306 / 461próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.