Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.202exploits catalogados
38.443CVEs com exploração pública
24.695testados em laboratório
82.202 exploits
GitHub PoC★ 3
haingn/LoHongCam-CVE-2021-33044
CVE-2021-33044CRITICALsob ataque22 out 2023
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-33044CRITICALsob ataque22 out 2023
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-36260CRITICALsob ataque22 out 2023
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
GitHub PoC
banyaksepuh/Mass-CVE-2021-3129-Scanner
CVE-2021-3129CRITICALsob ataqueransomware22 out 2023
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISCO
abrir ↗
GitHub PoC★ 1
haingn/HIK-CVE-2021-36260-Exploit
CVE-2021-36260CRITICALsob ataque22 out 2023
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware22 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware21 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir ↗
GitHub PoC★ 3
CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload
CVE-2023-5360—21 out 2023
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
60RISCO
abrir ↗
GitHub PoC
ShivamDey/CVE-2021-23017
CVE-2021-23017—21 out 2023
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t
35RISCO
abrir ↗
GitHub PoC
Nielk74/CVE-2023-38831
CVE-2023-38831HIGHsob ataqueransomware21 out 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir ↗
GitHub PoC
cve-2023-22515的python利用脚本
CVE-2023-22515CRITICALsob ataqueransomware21 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir ↗
GitHub PoC
ShivamDey/Samba-CVE-2007-2447-Exploit
CVE-2007-2447—21 out 2023
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISCO
abrir ↗
GitHub PoC
deIndra/CVE-2023-1698
CVE-2023-1698CRITICAL20 out 2023
WAGO: WBM Command Injection in multiple products
85RISCO
abrir ↗
GitHub PoC★ 61
VMware Aria Operations for Logs CVE-2023-34051
CVE-2023-34051CRITICAL20 out 2023
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can
60RISCO
abrir ↗
GitHub PoC★ 1
Joomla Unauthenticated Information Disclosure (CVE-2023-23752) exploit
CVE-2023-23752MEDIUMsob ataque20 out 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
GitHub PoC★ 20
Confluence后台rce
CVE-2023-22515CRITICALsob ataqueransomware20 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir ↗
GitHub PoC★ 2
WAGO系统远程代码执行漏洞(CVE-2023-1698)
CVE-2023-1698CRITICAL20 out 2023
WAGO: WBM Command Injection in multiple products
85RISCO
abrir ↗
GitHub PoC
yTxZx/CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware20 out 2023
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-23752MEDIUMsob ataque20 out 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-23752MEDIUMsob ataque20 out 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware20 out 2023
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-1698CRITICAL20 out 2023
WAGO: WBM Command Injection in multiple products
85RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-1698CRITICAL20 out 2023
WAGO: WBM Command Injection in multiple products
85RISCO
abrir ↗
VulnCheck XDB
local
CVE-2023-36802HIGHsob ataque20 out 2023
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
76RISCO
abrir ↗
GitHub PoC
testing cve-2023-41993-test
CVE-2023-41993HIGHsob ataque20 out 2023
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to
76RISCO
abrir ↗
GitHub PoC
reket99/Cisco_CVE-2023-20198
CVE-2023-20198CRITICALsob ataque20 out 2023
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISCO
abrir ↗
GitHub PoC
yTxZx/CVE-2023-23752
CVE-2023-23752MEDIUMsob ataque20 out 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗
GitHub PoC★ 4
CISCO CVE POC SCRIPT
CVE-2023-20198CRITICALsob ataque20 out 2023
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISCO
abrir ↗
GitHub PoC★ 3
yTxZx/CVE-2023-28432
CVE-2023-28432HIGHsob ataque20 out 2023
Minio Information Disclosure in Cluster Deployment
100RISCO
abrir ↗
GitHub PoC★ 6
1vere$k POC on the CVE-2023-20198
CVE-2023-20198CRITICALsob ataque20 out 2023
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RISCO
abrir ↗
← anteriorpágina 529 / 2.741próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.