Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

13.974 exploits

GitHub PoC

Drupal Drupal 8.6.x RCE Exploit

CVE-2019-6340HIGHsob ataque01 mai 2021

Drupal core - Highly critical - Remote Code Execution

100RISCO

abrir ↗

GitHub PoC★ 2

Confluence unauthorize template injection

CVE-2019-3396CRITICALsob ataqueransomware01 mai 2021

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RISCO

abrir ↗

GitHub PoC

CVE-2003-0264 SLMail5.5_RemoteBufferOverflow

CVE-2003-0264—01 mai 2021

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg

60RISCO

abrir ↗

GitHub PoC★ 3

vsftpd 2.3.4 Backdoor Exploit

CVE-2011-2523—01 mai 2021

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

abrir ↗

GitHub PoC

CVE-2009-0182 VUPlayer2.49_LocalBufferOverflow

CVE-2009-0182—01 mai 2021

Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in

50RISCO

abrir ↗

GitHub PoC

lvyoshino/CVE-2018-4878

CVE-2018-4878HIGHsob ataqueransomware30 abr 2021

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

93RISCO

abrir ↗

GitHub PoC★ 7

Apache OFBiz unsafe deserialization of XMLRPC arguments

CVE-2020-9496—30 abr 2021

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RISCO

abrir ↗

GitHub PoC★ 17

Moodle (< 3.6.2, < 3.5.4, < 3.4.7, < 3.1.16) XSS PoC for Privilege Escalation (Student to Admin)

CVE-2019-3810MEDIUM29 abr 2021

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported vers

38RISCO

abrir ↗

GitHub PoC★ 225

CVE-2021-3156 - Sudo Baron Samedit

CVE-2021-3156HIGHsob ataque29 abr 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

abrir ↗

GitHub PoC★ 2

Authenticated SQL injection to command execution on Cacti 1.2.12

CVE-2020-14295—28 abr 2021

A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead

60RISCO

abrir ↗

GitHub PoC★ 1

PoC for CVE-2018-13382, never successfully tested so swim at your own risk

CVE-2018-13382CRITICALsob ataqueransomware28 abr 2021

An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and Forti

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2019-12725 ZeroShell 远程命令执行漏洞

CVE-2019-12725—27 abr 2021

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RISCO

abrir ↗

GitHub PoC★ 10

lsw29475/CVE-2018-8611

CVE-2018-8611HIGHsob ataque27 abr 2021

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "

71RISCO

abrir ↗

GitHub PoC★ 1

streghstreek/CVE-2020-1938

CVE-2020-1938CRITICALsob ataque27 abr 2021

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISCO

abrir ↗

GitHub PoC★ 1

rebuild cve

CVE-2021-3291—25 abr 2021

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the mod

28RISCO

abrir ↗

GitHub PoC★ 31

Read my blog for more info -

CVE-2021-1732HIGHsob ataqueransomware25 abr 2021

Windows Win32k Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC

edsonjt81/CVE-2019-14287-

CVE-2019-14287—25 abr 2021

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISCO

abrir ↗

GitHub PoC

edsonjt81/sudo-cve-2019-18634

CVE-2019-18634—25 abr 2021

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISCO

abrir ↗

GitHub PoC★ 2

b1tg/CVE-2018-6065-exploit

CVE-2018-6065HIGHsob ataque24 abr 2021

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Ch

83RISCO

abrir ↗

GitHub PoC★ 66

CVE-2021-1732 poc & exp; tested on 20H2

CVE-2021-1732HIGHsob ataqueransomware23 abr 2021

Windows Win32k Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 3

oneoy/CVE-2021-3493

CVE-2021-3493HIGHsob ataque22 abr 2021

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

abrir ↗

GitHub PoC★ 13

CVE-2021-22192

CVE-2021-22192CRITICAL22 abr 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticat

53RISCO

abrir ↗

GitHub PoC★ 8

Automated tool to exploit sharepoint CVE-2019-0604

CVE-2019-0604CRITICALsob ataqueransomware22 abr 2021

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

100RISCO

abrir ↗

GitHub PoC

itssmikefm/CVE-2020-1472

CVE-2020-1472MEDIUMsob ataqueransomware22 abr 2021

Netlogon Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 3

POC exploit for CVE-2021-21972

CVE-2021-21972CRITICALsob ataqueransomware22 abr 2021

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISCO

abrir ↗

GitHub PoC★ 4

Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature

CVE-2021-31761—21 abr 2021

Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's ru

35RISCO

abrir ↗

GitHub PoC★ 1

Exploiting a Cross-site request forgery (CSRF) attack to creat a new privileged user through the Webmin's add users feature

CVE-2021-31762—21 abr 2021

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users fea

23RISCO

abrir ↗

GitHub PoC★ 8

Exploiting a Cross-site request forgery (CSRF) attack to creat a new privileged user through the Webmin's add users feature

CVE-2021-31762—21 abr 2021

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users fea

23RISCO

abrir ↗

GitHub PoC★ 47

DO NOT RUN THIS.

CVE-2021-22893CRITICALsob ataqueransomware21 abr 2021

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windo

90RISCO

abrir ↗

GitHub PoC★ 55

This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and update it yourself instead.

CVE-2018-14847CRITICALsob ataque21 abr 2021

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.