Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
82.241exploits catalogados
38.478CVEs com exploração pública
24.695testados em laboratório
TodosReferência 24.678Exploit-DB 24.485GitHub PoC 15.895VulnCheck XDB 9.215Nuclei 4.455Metasploit 3.513✓ só verificadosrecentespopularesrisco
82.244 exploits
VulnCheck XDB
infoleak
WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
63RISCO
abrir ↗VulnCheck XDB
initial-access
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability
70RISCO
abrir ↗VulnCheck XDB
infoleak
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISCO
abrir ↗GitHub PoC
LearnPress Plugin < 4.2.0 - Unauthenticated SQLi
WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection
63RISCO
abrir ↗GitHub PoC
LearnPress Plugin < 4.2.0 - Unauthenticated LFI Description
WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion
63RISCO
abrir ↗GitHub PoC★ 9
A PoC exploit for CVE-2018-9995 - DVR Authentication Bypass
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISCO
abrir ↗GitHub PoC★ 2
Python rewrite of the POC for CVE-2023-34634
Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .green
38RISCO
abrir ↗GitHub PoC★ 2
Exploit de reverseshell para desserialização em NodeJs (CVE-2017-5941)
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() fu
35RISCO
abrir ↗Metasploit300
ThinManager Path Traversal (CVE-2023-2915) Arbitrary File Delete
Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
58RISCO
abrir ↗Metasploit300
ThinManager Path Traversal (CVE-2023-2917) Arbitrary File Upload
Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
65RISCO
abrir ↗Metasploit600
Junos OS PHPRC Environment Variable Manipulation RCE
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗GitHub PoC★ 27
3tternp/CVE-2023-21554
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
85RISCO
abrir ↗GitHub PoC
tianstcht/CVE-2023-2033
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corr
83RISCO
abrir ↗GitHub PoC
asepsaepdin/CVE-2022-21907
HTTP Protocol Stack Remote Code Execution Vulnerability
70RISCO
abrir ↗GitHub PoC
Ivanti Avalanche v6.4.0.0 RCE POC
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup
78RISCO
abrir ↗GitHub PoC★ 5
PoC exploit for file upload vulnerability in BoidCMS version <=2.0.0
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header t
60RISCO
abrir ↗VulnCheck XDB
initial-access
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗VulnCheck XDB
client-side
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr
83RISCO
abrir ↗GitHub PoC
GitHub repository for CVE-2023-3460 POC
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISCO
abrir ↗VulnCheck XDB
local
On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay
61RISCO
abrir ↗GitHub PoC★ 130
mistymntncop/CVE-2023-3079
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr
83RISCO
abrir ↗VulnCheck XDB
local
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could
71RISCO
abrir ↗Metasploit600
Ivanti Avalanche MDM Buffer Overflow
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup
78RISCO
abrir ↗GitHub PoC★ 8
Local privilege escalation exploit for Android Binder bug CVE-2020-0041 (Pixel 3a)
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could
71RISCO
abrir ↗GitHub PoC
This is a combination of the zerologon_tester.py code (https://raw.githubusercontent.com/SecuraBV/CVE-2020-1472/master/zerologon_tester.py) and the tool evil-winrm to get a shell.
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗VulnCheck XDB
local
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.