Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
82.202exploits catalogados
38.443CVEs com exploração pública
24.695testados em laboratório
TodosReferência 24.651Exploit-DB 24.485GitHub PoC 15.884VulnCheck XDB 9.215Nuclei 4.454Metasploit 3.513✓ só verificadosrecentespopularesrisco
82.202 exploits
GitHub PoC
Trinadh465/platform_external_libvpx_v1.4.0_CVE-2023-5217
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISCO
abrir ↗GitHub PoC
CVE-2021-3560 Bypass su - root
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir ↗VulnCheck XDB
client-side
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISCO
abrir ↗GitHub PoC★ 16
A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISCO
abrir ↗GitHub PoC
Trinadh465/platform_external_libvpx_v1.8.0_CVE-2023-5217
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISCO
abrir ↗GitHub PoC★ 79
Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir ↗VulnCheck XDB
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir ↗GitHub PoC★ 21
A tool for finding vulnerable libwebp(CVE-2023-4863)
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISCO
abrir ↗GitHub PoC★ 9
PoC of CVE-2023-42793
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISCO
abrir ↗VulnCheck XDB
infoleak
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a
60RISCO
abrir ↗GitHub PoC
whoamins/CVE-2023-42793
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISCO
abrir ↗VulnCheck XDB
initial-access
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISCO
abrir ↗GitHub PoC★ 167
CVE-2023-4911 proof of concept
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISCO
abrir ↗GitHub PoC★ 393
PoC for CVE-2023-4911
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISCO
abrir ↗Metasploit300
Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir ↗GitHub PoC★ 15
https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISCO
abrir ↗Metasploit600
Atlassian Confluence Unauthenticated Remote Code Execution
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir ↗Metasploit600
PyTorch Model Server Registration and Deserialization RCE
Remote Code execution in SnakeYAML
58RISCO
abrir ↗Metasploit600
Glibc Tunables Privilege Escalation CVE-2023-4911 (aka Looney Tunables)
Glibc: buffer overflow in ld.so leading to privilege escalation
98RISCO
abrir ↗Metasploit600
PyTorch Model Server Registration and Deserialization RCE
TorchServe Server-Side Request Forgery
75RISCO
abrir ↗GitHub PoC
Checker for CVE-2022-0441
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
60RISCO
abrir ↗VulnCheck XDB
remote-with-credentials
Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.
46RISCO
abrir ↗VulnCheck XDB
initial-access
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗GitHub PoC★ 1
Analysis of WS_FTP CVE
WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
100RISCO
abrir ↗GitHub PoC★ 4
CVE-2023-36845 PoC script automates the PoC for CVE-2023-36845 targeting Juniper Networks Junos OS's J-Web component on EX and SRX Series devices. It exploits a PHP flaw, allowing remote modification of the PHPRC variable. Successful exploitation can lead to code injection and execution.
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.