Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.081exploits catalogados
38.339CVEs com exploração pública
24.695testados em laboratório
82.081 exploits
VulnCheck XDB
initial-access
CVE-2024-3400CRITICALsob ataqueransomware17 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC★ 2
Fork of https://github.com/hakaioffsec/CVE-2024-21338
CVE-2024-21338HIGHsob ataqueransomware17 abr 2024
Windows Kernel Elevation of Privilege Vulnerability
83RISCO
abrir ↗
GitHub PoC★ 2
Have we not learnt from HoneyPoC?
CVE-2024-3400CRITICALsob ataqueransomware17 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC★ 9
Global Protec Palo Alto File Write Exploit
CVE-2024-3400CRITICALsob ataqueransomware17 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC★ 8
CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC
LoanVitor/CVE-2024-3400-
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC
LeopoldSkell/CVE-2024-3273
CVE-2024-3273HIGHsob ataque16 abr 2024
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC★ 15
Chocapikk/CVE-2024-3400
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC★ 34
CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC★ 2
CONDITIONBLACK/CVE-2024-3400-POC
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC★ 162
CVE-2024-3400 Palo Alto OS Command Injection
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-50164—16 abr 2024
Apache Struts: File upload component had a directory traversal vulnerability
45RISCO
abrir ↗
GitHub PoC★ 90
CVE-2024-3400-RCE
CVE-2024-3400CRITICALsob ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC
A simple bash script to check for evidence of compromise related to CVE-2024-3400
CVE-2024-3400CRITICALsob ataqueransomware15 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗
GitHub PoC★ 6
This is a critical UAF vulnerability exploit that affected the android binder IPC system used in the wild and discovered by P0
CVE-2019-2215HIGHsob ataque15 abr 2024
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
abrir ↗
Exploit-DB
OpenClinic GA 5.247.01 - Information Disclosure
CVE-2023-40278HIGHwebappsphp15 abr 2024
An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the pr
41RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-23897CRITICALsob ataqueransomware15 abr 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗
Exploit-DB
OpenClinic GA 5.247.01 - Path Traversal (Authenticated)
CVE-2023-40279HIGHwebappsphp15 abr 2024
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page param
41RISCO
abrir ↗
GitHub PoC
OS 12.0 & 12.1.2 - Jailbreak with CVE-2019-6225
CVE-2019-6225—15 abr 2024
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.
28RISCO
abrir ↗
Exploit-DB
Jenkins 2.441 - Local File Inclusion
CVE-2024-23897CRITICALsob ataqueransomwarewebappsjava15 abr 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗
GitHub PoC★ 3
dcheng69/CVE-2022-0185-Case-Study
CVE-2022-0185HIGHsob ataque15 abr 2024
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RISCO
abrir ↗
Exploit-DB
djangorestframework-simplejwt 5.3.1 - Information Disclosure
CVE-2024-22513MEDIUMwebappspython15 abr 2024
djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web ap
33RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2023-23752MEDIUMsob ataque15 abr 2024
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2019-2215HIGHsob ataque15 abr 2024
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
abrir ↗
GitHub PoC
Joomla! < 4.2.8 - Unauthenticated information disclosure
CVE-2023-23752MEDIUMsob ataque15 abr 2024
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-1938CRITICALsob ataque14 abr 2024
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISCO
abrir ↗
← anteriorpágina 478 / 2.737próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.