Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
82.202exploits catalogados
38.443CVEs com exploração pública
24.695testados em laboratório
TodosReferência 24.651Exploit-DB 24.485GitHub PoC 15.884VulnCheck XDB 9.215Nuclei 4.454Metasploit 3.513✓ só verificadosrecentespopularesrisco
82.202 exploits
VulnCheck XDB
remote-with-credentials
Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.
46RISCO
abrir ↗VulnCheck XDB
initial-access
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗GitHub PoC★ 39
A tool that checks if a TorchServe instance is vulnerable to CVE-2023-43654
TorchServe Server-Side Request Forgery
75RISCO
abrir ↗VulnCheck XDB
infoleak
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗VulnCheck XDB
local
Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified
28RISCO
abrir ↗GitHub PoC★ 1
simrotion13/CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗GitHub PoC★ 6
navreet1425/CVE-2021-34621
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
75RISCO
abrir ↗VulnCheck XDB
initial-access
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
75RISCO
abrir ↗VulnCheck XDB
initial-access
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISCO
abrir ↗GitHub PoC★ 6
Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISCO
abrir ↗GitHub PoC★ 54
LuemmelSec/CVE-2023-29357
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISCO
abrir ↗VulnCheck XDB
infoleak
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗GitHub PoC★ 45
JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISCO
abrir ↗GitHub PoC★ 3
CVE-2023-36845 - Juniper Firewall Remote code execution (RCE)
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗GitHub PoC
jytmX/CVE-2021-24499
Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
50RISCO
abrir ↗VulnCheck XDB
initial-access
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISCO
abrir ↗VulnCheck XDB
initial-access
Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
50RISCO
abrir ↗GitHub PoC
go CVE-2023-24538 patch issue resolver - Dunfell
Backticks not treated as string delimiters in html/template
48RISCO
abrir ↗GitHub PoC
go CVE-2023-24538 patch issue resolver - Kirkstone
Backticks not treated as string delimiters in html/template
48RISCO
abrir ↗GitHub PoC★ 5
Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to
93RISCO
abrir ↗VulnCheck XDB
infoleak
An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensiti
68RISCO
abrir ↗GitHub PoC★ 41
MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit
Windows Search Remote Code Execution Vulnerability
93RISCO
abrir ↗GitHub PoC★ 3
PoC for Stored XSS (CVE-2023-43770) Vulnerability
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craft
75RISCO
abrir ↗Metasploit600
Kafka UI Unauthenticated Remote Command Execution via the Groovy Filter option.
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the
78RISCO
abrir ↗GitHub PoC★ 1
halencarjunior/CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗Metasploit600
Progress Software WS_FTP Unauthenticated Remote Code Execution
WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
100RISCO
abrir ↗GitHub PoC★ 34
A Proof-Of-Concept for the CVE-2023-43770 vulnerability.
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craft
75RISCO
abrir ↗GitHub PoC★ 9
CVE-2023-34152
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob wit
48RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.