Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.117exploits catalogados

38.374CVEs com exploração pública

24.695testados em laboratório

Todos Referência 24.594Exploit-DB 24.485GitHub PoC 15.871VulnCheck XDB 9.205Nuclei 4.449Metasploit 3.513✓ só verificadosrecentes populares risco

82.117 exploits

GitHub PoC★ 1

This is a exploit of CVE-2021-32305 a web vulnerability to command injection on search.php path, this exploit allows execute commands.

CVE-2021-32305—26 dez 2023

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RISCO

abrir ↗

GitHub PoC★ 2

Exploit Development using python for CVE-2023-38831 (POC)

CVE-2023-38831HIGHsob ataqueransomware26 dez 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2023-41892

CVE-2023-41892CRITICAL26 dez 2023

Craft CMS Remote Code Execution vulnerability

85RISCO

abrir ↗

GitHub PoC★ 5

Exploit for Arbitrary File Read for CVE-2023-26360 - Adobe Coldfusion

CVE-2023-26360HIGHsob ataque26 dez 2023

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RISCO

abrir ↗

GitHub PoC★ 1

MkJos/CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246CRITICALsob ataque26 dez 2023

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RISCO

abrir ↗

GitHub PoC★ 1

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader]

CVE-2023-1389HIGHsob ataque25 dez 2023

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RISCO

abrir ↗

GitHub PoC★ 12

dust-life/CVE-2019-18935-memShell

CVE-2019-18935CRITICALsob ataqueransomware25 dez 2023

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-27524HIGHsob ataque25 dez 2023

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RISCO

abrir ↗

GitHub PoC★ 2

Explore the depths of CVE-2023-6710 with our comprehensive Proof of Concept (PoC). This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks.

CVE-2023-6710MEDIUM25 dez 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RISCO

abrir ↗

GitHub PoC★ 1

Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration testing and ethical hacking. Developed and maintained by Mohamed Mounir Boudjema, this repository is crafted with a deep understanding of the evolving landscape of cybersecurity.

CVE-2023-6710MEDIUM25 dez 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMsob ataque24 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

Metasploit600

Barracuda ESG Spreadsheet::ParseExcel Arbitrary Code Execution

CVE-2023-7101HIGHsob ataque24 dez 2023

Arbitrary Code Execution (ACE) Vulnerability

71RISCO

abrir ↗

Metasploit600

Barracuda ESG Spreadsheet::ParseExcel Arbitrary Code Execution

CVE-2023-7102—24 dez 2023

Remote Code Execution (RCE) Vulnerability

30RISCO

abrir ↗

VulnCheck XDB

local

CVE-2023-0386HIGHsob ataque23 dez 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISCO

abrir ↗

VulnCheck XDB

local

CVE-2023-4911HIGHsob ataque23 dez 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

98RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware23 dez 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC★ 18

puckiestyle/CVE-2023-0386

CVE-2023-0386HIGHsob ataque23 dez 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISCO

abrir ↗

GitHub PoC★ 2

puckiestyle/CVE-2023-4911

CVE-2023-4911HIGHsob ataque23 dez 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

98RISCO

abrir ↗

GitHub PoC

CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker

CVE-2023-46604CRITICALsob ataqueransomware23 dez 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC★ 4

Guillaume-Risch/cve-2023-29357-Sharepoint

CVE-2023-29357CRITICALsob ataqueransomware22 dez 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2016-4437CRITICALsob ataque22 dez 2023

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RISCO

abrir ↗

GitHub PoC★ 16

CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that leads to Remote Command Execution via crafted docx document.

CVE-2023-50254CRITICAL22 dez 2023

Deepin Reader RCE vulnerability due to a design flaw

48RISCO

abrir ↗

GitHub PoC★ 2

Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key

CVE-2016-4437CRITICALsob ataque22 dez 2023

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2021-35587CRITICALsob ataque21 dez 2023

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported ver

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-2109HIGH21 dez 2023

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

63RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2022-22536CRITICALsob ataque21 dez 2023

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-2109HIGH21 dez 2023

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

63RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALsob ataqueransomware21 dez 2023

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2017-0199HIGHsob ataqueransomware21 dez 2023

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-20250HIGHsob ataqueransomware21 dez 2023

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.