Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.192exploits catalogados
37.765CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.138GitHub PoC 15.542VulnCheck XDB 9.091Nuclei 4.434Metasploit 3.505✓ só verificadosrecentespopularesrisco
15.542 exploits
GitHub PoC
movvamrocks/PwnKit-CVE-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗GitHub PoC★ 1
Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
abrir ↗GitHub PoC
This script is intended to validate Apache Struts 2 vulnerability (CVE-2017-5638), AKA Struts-Shock.
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗GitHub PoC
skentagon/CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC★ 1
Fa1c0n35/zabbix-cve-2022-23131
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
100RISCO
abrir ↗GitHub PoC★ 303
PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"
Windows Runtime Remote Code Execution Vulnerability
83RISCO
abrir ↗GitHub PoC★ 1
Script to demonstrate the Grafana directory traversal exploit (CVE-2021-43798).
Grafana path traversal
100RISCO
abrir ↗GitHub PoC★ 1
hahaleyile/CVE-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗GitHub PoC★ 8
Apache APISIX batch-requests RCE(CVE-2022-24112)
apisix/batch-requests plugin allows overwriting the X-REAL-IP header
100RISCO
abrir ↗GitHub PoC★ 8
POC for CVE-2022-24124
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as d
50RISCO
abrir ↗GitHub PoC★ 2
Python scanner for TestRail servers vulnerable to CVE-2021-40875
Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat ac
50RISCO
abrir ↗GitHub PoC★ 3
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗GitHub PoC★ 2
pykiller/CVE-2022-23131
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
100RISCO
abrir ↗GitHub PoC★ 1
trganda/CVE-2022-23131
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
100RISCO
abrir ↗GitHub PoC★ 8
Zabbix SSO Bypass
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
100RISCO
abrir ↗GitHub PoC★ 1
TheJoyOfHacking/dirkjanm-CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗GitHub PoC★ 43
CVE-2022-24112：Apache APISIX apisix/batch-requests RCE
apisix/batch-requests plugin allows overwriting the X-REAL-IP header
100RISCO
abrir ↗GitHub PoC★ 29
cve-2022-23131
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
100RISCO
abrir ↗GitHub PoC★ 2
mxypoo/CVE-2016-3116-DropbearSSH
CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-c
28RISCO
abrir ↗GitHub PoC
Apache APISIX apisix/batch-requests RCE
apisix/batch-requests plugin allows overwriting the X-REAL-IP header
100RISCO
abrir ↗GitHub PoC
TheJoyOfHacking/SecuraBV-CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗GitHub PoC★ 9
exiftool exploit
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISCO
abrir ↗GitHub PoC★ 1
poc
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
100RISCO
abrir ↗GitHub PoC★ 1
Tanmay-N/CVE-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗GitHub PoC
CVE-2019-15107 Webmin 1.920 RCE
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗GitHub PoC★ 35
CVE-2022-24086 about Magento RCE
Adobe Commerce checkout improper input validation leads to remote code execution
100RISCO
abrir ↗GitHub PoC★ 1
Proof Of Concept for the 2021's pkexec vulnerability CVE-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗GitHub PoC★ 3
An exploit for CVE-2020-6418 implementing a SHELF Loader. Published as part of Tmp.0ut volume 2
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru
100RISCO
abrir ↗GitHub PoC★ 37
CVE-2022-0185 POC and Docker and Analysis write up
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RISCO
abrir ↗GitHub PoC
LeQuocKhanh2K/Tool_Exploit_Password_Camera_CVE-2018-9995
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.