Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.003exploits catalogados
37.620CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.011GitHub PoC 15.501VulnCheck XDB 9.077Nuclei 4.427Metasploit 3.505✓ só verificadosrecentespopularesrisco
15.501 exploits
GitHub PoC★ 3
CVE-2023-38831 WinRAR
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 22
Pasos necesarios para obtener una reverse shell explotando la vulnerabilidad de winrar CVE-2023-38831 en versiones anteriores a 6.23.
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 4
KQL Hunting for WinRAR CVE-2023-38831
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 90
CVE-2023-38831 PoC (Proof Of Concept)
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 40
Understanding WinRAR Code Execution Vulnerability (CVE-2023-38831)
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 6
CloudPanel 2 Remote Code Execution Exploit
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
85RISCO
abrir ↗GitHub PoC★ 7
PHPUnit RCE
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISCO
abrir ↗GitHub PoC★ 114
An easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831, WinRAR RCE before versions 6.23
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 1
POC for CVE-2023-24489 with bash.
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, coul
100RISCO
abrir ↗GitHub PoC★ 128
一款用于生成winrar程序RCE（即cve-2023-38831）的POC的工具。
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 2
IR-HuntGuardians/CVE-2023-38831-HUNT
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 1
Python implementation of CVE-2018-16858
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could
68RISCO
abrir ↗GitHub PoC
ptkhai15/OverlayFS---CVE-2021-3493
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
abrir ↗GitHub PoC
krmxd/CVE-2023-2868
Remote Code injection in Barracuda Email Security Gateway
100RISCO
abrir ↗GitHub PoC★ 7
A PoC exploit for CVE-2021-42013 - Apache 2.4.49 & 2.4.50 Remote Code Execution
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
abrir ↗GitHub PoC★ 115
watchtowrlabs/juniper-rce_cve-2023-36844
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
100RISCO
abrir ↗GitHub PoC★ 785
CVE-2023-38831 winrar exploit generator
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 91
lazy way to create CVE-2023-38831 winrar file for testing
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗GitHub PoC★ 12
PHP CGI Argument Injection.
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RISCO
abrir ↗GitHub PoC★ 205
Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISCO
abrir ↗GitHub PoC★ 7
CVE-2023-38035 Recon oriented exploit, extract company name contact information
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RISCO
abrir ↗GitHub PoC★ 40
Ivanti Sentry CVE-2023-38035
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RISCO
abrir ↗GitHub PoC★ 243
Wh04m1001/CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISCO
abrir ↗GitHub PoC
Lab environment to test CVE-2023-25725
HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situatio
48RISCO
abrir ↗GitHub PoC★ 1
Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2
Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh
60RISCO
abrir ↗GitHub PoC★ 2
CVE-2023-36874 Proof of Concept
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISCO
abrir ↗GitHub PoC★ 79
This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Windows Error Reporting (WER) component.
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RISCO
abrir ↗GitHub PoC
Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation'
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.