Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.310exploits catalogados

38.523CVEs com exploração pública

24.695testados em laboratório

Todos Referência 24.711Exploit-DB 24.485GitHub PoC 15.925VulnCheck XDB 9.221Nuclei 4.455Metasploit 3.513✓ só verificadosrecentes populares risco

82.311 exploits

GitHub PoC

Exploit to cve-2023-1671. So there is a test and exploitation function. The test sends a ping request to the dnslog domain from the vulnerable site. If the ping passes, the vulnerability exists, if it doesn't, then cve-2023-1671 is missing. The exploit function, on the other hand, sends a request with your command to the server.

CVE-2023-1671CRITICALsob ataque17 mai 2023

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10

100RISCO

VulnCheck XDB

initial-access

CVE-2023-1671CRITICALsob ataque17 mai 2023

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10

100RISCO

GitHub PoC★ 2

CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281.

CVE-2023-31702HIGH17 mai 2023

SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to d

41RISCO

VulnCheck XDB

local

CVE-2023-32784HIGH17 mai 2023

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work

41RISCO

GitHub PoC★ 4

A reflected Cross-Site Scripting (XSS) vulnerability exists in the Edit User functionality of the Microworld Technologies eScan Management Console (version 14.0.1400.2281).

CVE-2023-31703CRITICAL17 mai 2023

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allo

48RISCO

Metasploit600

Delta Electronics InfraSuite Device Master Deserialization

CVE-2023-1133CRITICAL17 mai 2023

CVE-2023-1133

75RISCO

GitHub PoC★ 24

PoC for CVE-2023-20126

CVE-2023-20126CRITICAL17 mai 2023

Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability

60RISCO

VulnCheck XDB

local

CVE-2022-3699HIGH17 mai 2023

A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo

56RISCO

GitHub PoC★ 11

POC for the CVE-2022-36944 vulnerability exploit

CVE-2022-36944CRITICAL16 mai 2023

Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. On its own, it cannot be exploited. There i

53RISCO

VulnCheck XDB

local

CVE-2023-0386HIGHsob ataque16 mai 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISCO

GitHub PoC★ 51

Vulnerabilities Exploitation On Ubuntu 22.04

CVE-2023-0386HIGHsob ataque16 mai 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RISCO

VulnCheck XDB

local

CVE-2023-32233HIGH16 mai 2023

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused

46RISCO

VulnCheck XDB

infoleak

CVE-2017-13156—16 mai 2023

An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,

43RISCO

VulnCheck XDB

local

CVE-2023-32233HIGH16 mai 2023

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused

46RISCO

VulnCheck XDB

local

CVE-2023-32233HIGH16 mai 2023

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused

46RISCO

VulnCheck XDB

initial-access

CVE-2023-25194HIGH15 mai 2023

Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect

78RISCO

Metasploit600

SolarView Compact unauthenticated remote command execution vulnerability.

CVE-2023-23333CRITICAL15 mai 2023

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassin

85RISCO

VulnCheck XDB

initial-access

CVE-2023-32243CRITICAL15 mai 2023

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

85RISCO

VulnCheck XDB

local

CVE-2023-28206HIGHsob ataque15 mai 2023

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5,

76RISCO

GitHub PoC★ 1

Exploit script for CVE-2022-41544 - RCE in get-simple CMS

CVE-2022-41544HIGH15 mai 2023

GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file paramete

46RISCO

GitHub PoC★ 8

Abusing CVE-2023-28206 to make something useful

CVE-2023-28206HIGHsob ataque15 mai 2023

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5,

76RISCO

GitHub PoC

school project

CVE-2019-15107CRITICALsob ataqueransomware15 mai 2023

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

GitHub PoC★ 84

CVE-2023-32243 - Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation

CVE-2023-32243CRITICAL15 mai 2023

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

85RISCO

VulnCheck XDB

initial-access

CVE-2019-11447—14 mai 2023

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RISCO

GitHub PoC★ 3

Exploit for CVE-2023-32243 - Unauthorized Account Takeover.

CVE-2023-32243CRITICAL14 mai 2023

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

85RISCO

VulnCheck XDB

local

CVE-2022-24481HIGH14 mai 2023

Windows Common Log File System Driver Elevation of Privilege Vulnerability

46RISCO

VulnCheck XDB

client-side

CVE-2022-30190HIGHsob ataqueransomware14 mai 2023

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 12

Follina (CVE-2022-30190) is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution (RCE) attacks.

CVE-2022-30190HIGHsob ataqueransomware14 mai 2023

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

initial-access

CVE-2023-32243CRITICAL14 mai 2023

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

85RISCO

VulnCheck XDB

local

CVE-2021-3156HIGHsob ataque14 mai 2023

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.