Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.419exploits catalogados

38.564CVEs com exploração pública

24.695testados em laboratório

Todos Referência 24.745Exploit-DB 24.485GitHub PoC 15.945VulnCheck XDB 9.270Nuclei 4.456Metasploit 3.518✓ só verificadosrecentes populares risco

82.419 exploits

VulnCheck XDB

initial-access

CVE-2023-0297CRITICAL09 jan 2023

Code Injection in pyload/pyload

85RISCO

abrir ↗

GitHub PoC

zabbix saml bypass

CVE-2022-23131CRITICALsob ataque09 jan 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RISCO

abrir ↗

GitHub PoC★ 28

CVE-2023-0297: The Story of Finding Pre-auth RCE in pyLoad

CVE-2023-0297CRITICAL09 jan 2023

Code Injection in pyload/pyload

85RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2022-23131CRITICALsob ataque09 jan 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2018-9995—09 jan 2023

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

abrir ↗

GitHub PoC

Sophos EXploit

CVE-2022-1040CRITICALsob ataque08 jan 2023

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1040CRITICALsob ataque08 jan 2023

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho

100RISCO

abrir ↗

GitHub PoC★ 1

wr0x00/cve-2022-23131

CVE-2022-23131CRITICALsob ataque07 jan 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RISCO

abrir ↗

GitHub PoC★ 26

Dell Driver EoP (CVE-2021-21551)

CVE-2021-21551HIGHsob ataque07 jan 2023

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

100RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2022-23131CRITICALsob ataque07 jan 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2021-38003HIGHsob ataque07 jan 2023

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo

83RISCO

abrir ↗

GitHub PoC★ 2

CVE-2018-19321

CVE-2018-19321HIGHsob ataqueransomware07 jan 2023

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, X

71RISCO

abrir ↗

VulnCheck XDB

local

CVE-2021-21551HIGHsob ataque07 jan 2023

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

100RISCO

abrir ↗

GitHub PoC★ 11

Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.

CVE-2022-39073CRITICAL07 jan 2023

There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an att

48RISCO

abrir ↗

GitHub PoC★ 37

CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224

CVE-2021-38003HIGHsob ataque07 jan 2023

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo

83RISCO

abrir ↗

Metasploit600

Jorani unauthenticated Remote Code Execution

CVE-2023-26469—06 jan 2023

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.

60RISCO

abrir ↗

GitHub PoC

POC Exploit for CVE-2022-44149

CVE-2022-44149HIGH06 jan 2023

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by

53RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-44877CRITICALsob ataque06 jan 2023

100RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2022-44149HIGH06 jan 2023

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by

53RISCO

abrir ↗

GitHub PoC★ 10

CVE-2022-44877 Centos Web Panel 7 Unauthenticated Remote Code Execution

CVE-2022-44877CRITICALsob ataque06 jan 2023

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque05 jan 2023

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

abrir ↗

GitHub PoC★ 5

Proof of concept for exploiting the Heartbeat Extension bug detailed in the CVE-2014-0160. :old_key: :unlock:

CVE-2014-0160HIGHsob ataque05 jan 2023

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALsob ataque05 jan 2023

Unauthenticated Command Injection

100RISCO

abrir ↗

GitHub PoC★ 103

numanturle/CVE-2022-44877

CVE-2022-44877CRITICALsob ataque05 jan 2023

100RISCO

abrir ↗

GitHub PoC★ 29

PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti <= 1.2.22

CVE-2022-46169CRITICALsob ataque05 jan 2023

Unauthenticated Command Injection

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-44877CRITICALsob ataque05 jan 2023

100RISCO

abrir ↗

Metasploit600

CWP login.php Unauthenticated RCE

CVE-2022-44877CRITICALsob ataque05 jan 2023

100RISCO

abrir ↗

GitHub PoC★ 12

Basic POC exploit for CVE-2022-46164

CVE-2022-46164CRITICAL04 jan 2023

Account takeover via prototype vulnerability

60RISCO

abrir ↗

GitHub PoC★ 1

Webmin < 1.290 / Usermin < 1.220 - Arbitrary file disclosure

CVE-2006-3392—04 jan 2023

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RISCO

abrir ↗

GitHub PoC

CVE-2021-4034 PoC

CVE-2021-4034HIGHsob ataqueransomware04 jan 2023

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.