Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.930exploits catalogados

37.572CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 23.973GitHub PoC 15.478VulnCheck XDB 9.069Nuclei 4.426Metasploit 3.502✓ só verificadosrecentes populares risco

15.478 exploits

GitHub PoC★ 24

buptsb/CVE-2023-4762

CVE-2023-4762HIGHsob ataque27 set 2023

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a

83RISCO

abrir ↗

GitHub PoC★ 34

A Proof-Of-Concept for the CVE-2023-43770 vulnerability.

CVE-2023-43770MEDIUMsob ataque27 set 2023

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craft

75RISCO

abrir ↗

GitHub PoC★ 9

CVE-2023-34152

CVE-2023-34152CRITICAL27 set 2023

A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob wit

48RISCO

abrir ↗

GitHub PoC★ 1

halencarjunior/CVE-2023-36845

CVE-2023-36845CRITICALsob ataque27 set 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISCO

abrir ↗

GitHub PoC★ 1

New exploitation of 2020 Sophos vuln

CVE-2022-1040CRITICALsob ataque26 set 2023

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho

100RISCO

abrir ↗

GitHub PoC★ 55

Juniper Firewalls CVE-2023-36845 - RCE

CVE-2023-36845CRITICALsob ataque26 set 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISCO

abrir ↗

GitHub PoC★ 239

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVE-2023-29357CRITICALsob ataqueransomware26 set 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 1

Automatic Mass Tool for check and exploiting vulnerability in CVE-2022-4047 - Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload

CVE-2022-4047CRITICAL26 set 2023

Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload

48RISCO

abrir ↗

GitHub PoC★ 8

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

CVE-2023-20887CRITICALsob ataque25 set 2023

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware

100RISCO

abrir ↗

GitHub PoC★ 3

BAD-WEBP-CVE-2023-4863

CVE-2023-4863HIGHsob ataque25 set 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

GitHub PoC★ 6

bbaranoff/CVE-2023-4863

CVE-2023-4863HIGHsob ataque25 set 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

GitHub PoC★ 5

A Proof of Concept for chaining the CVEs [CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847] to achieve Remote Code Execution (phpinfo) in Juniper JunOS within SRX and EX Series products.Modified from original exploit developed by @watchTowr .

CVE-2023-36844MEDIUMsob ataque24 set 2023

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

100RISCO

abrir ↗

GitHub PoC★ 151

Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver

CVE-2023-29360HIGHsob ataque24 set 2023

Microsoft Streaming Service Elevation of Privilege Vulnerability

76RISCO

abrir ↗

GitHub PoC

DimaMend/cve-2022-42889-text4shell

CVE-2022-42889—22 set 2023

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RISCO

abrir ↗

GitHub PoC★ 316

mistymntncop/CVE-2023-4863

CVE-2023-4863HIGHsob ataque21 set 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

GitHub PoC★ 3

Proof-of-Concept (POC) of CVE-2023-38831 Zero-Day vulnerability in WinRAR

CVE-2023-38831HIGHsob ataqueransomware21 set 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

GitHub PoC

Perform With Massive Juniper Remote Code Execution

CVE-2023-36844MEDIUMsob ataque20 set 2023

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

100RISCO

abrir ↗

GitHub PoC★ 1

A PoC for CVE-2022-26134 for Educational Purposes and Security Research

CVE-2022-26134CRITICALsob ataqueransomware20 set 2023

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

GitHub PoC

ngothienan/CVE-2023-38831

CVE-2023-38831HIGHsob ataqueransomware17 set 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

GitHub PoC★ 1

CVE: CVE-2022-0847

CVE-2022-0847HIGHsob ataque17 set 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

abrir ↗

GitHub PoC

futurezayka/CVE-2011-3192

CVE-2011-3192—16 set 2023

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attac

60RISCO

abrir ↗

GitHub PoC★ 62

A go-exploit to scan for Juniper firewalls vulnerable to CVE-2023-36845

CVE-2023-36845CRITICALsob ataque16 set 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISCO

abrir ↗

GitHub PoC★ 5

WAGO Remote Exploit Tool for CVE-2023-1698

CVE-2023-1698CRITICAL15 set 2023

WAGO: WBM Command Injection in multiple products

85RISCO

abrir ↗

GitHub PoC★ 8

Automatic Mass Tool for checking vulnerability in CVE-2022-4060 - WordPress Plugin : User Post Gallery <= 2.19 - Unauthenticated RCE

CVE-2022-4060CRITICAL15 set 2023

User Post Gallery <= 2.19 - Unauthenticated RCE

75RISCO

abrir ↗

GitHub PoC

Anthony1500/CVE-2022-40684

CVE-2022-40684CRITICALsob ataqueransomware14 set 2023

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC

CVE-2018-1000861 Exploit

CVE-2018-1000861CRITICALsob ataque13 set 2023

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and ea

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2023-43481

CVE-2023-43481CRITICAL13 set 2023

An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote att

48RISCO

abrir ↗

GitHub PoC★ 3

Proof of concept (PoC) exploit for WinRAR vulnerability (CVE-2023-38831) vulnerability

CVE-2023-38831HIGHsob ataqueransomware12 set 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

GitHub PoC★ 9

CVE-2023-38831 WinRaR Exploit Generator

CVE-2023-38831HIGHsob ataqueransomware12 set 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

GitHub PoC

ช่องโหว่ CVE-2023-35674 *สถานะ: ยังไม่เสร็จ*

CVE-2023-35674HIGHsob ataque11 set 2023

In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the cod

71RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.