Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.419exploits catalogados
38.564CVEs com exploração pública
24.695testados em laboratório
82.419 exploits
VulnCheck XDB
client-side
CVE-2018-17463HIGHsob ataque28 dez 2022
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbit
100RISCO
abrir ↗
GitHub PoC
Exploit i used in HTB
CVE-2007-2447—27 dez 2022
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISCO
abrir ↗
GitHub PoC
cve based on vulnerable cisco's Archer A7 routers
CVE-2020-10882HIGH27 dez 2022
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arch
68RISCO
abrir ↗
GitHub PoC
michealadams30/Cve-2022-26809
CVE-2022-26809CRITICAL26 dez 2022
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISCO
abrir ↗
GitHub PoC★ 1
michealadams30/Cve-2022-30190
CVE-2022-30190HIGHsob ataqueransomware26 dez 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
hycheng15/CVE-2021-3156
CVE-2021-3156HIGHsob ataque25 dez 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir ↗
GitHub PoC
CVE-2022-26134 GO POC 练习
CVE-2022-26134CRITICALsob ataqueransomware25 dez 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
GitHub PoC
G01d3nW01f/CVE-2021-29447
CVE-2021-29447HIGH25 dez 2022
WordPress Authenticated XXE attack when installation is running PHP 8
63RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware25 dez 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-3156HIGHsob ataque25 dez 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2022-3699HIGH25 dez 2022
A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo
56RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALsob ataqueransomware24 dez 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC★ 7
-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams
CVE-2022-1388CRITICALsob ataqueransomware24 dez 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2022-41080HIGHsob ataqueransomware23 dez 2022
Microsoft Exchange Server Elevation of Privilege Vulnerability
93RISCO
abrir ↗
GitHub PoC★ 1
ohnonoyesyes/CVE-2022-41080
CVE-2022-41080HIGHsob ataqueransomware23 dez 2022
Microsoft Exchange Server Elevation of Privilege Vulnerability
93RISCO
abrir ↗
VulnCheck XDB
local
CVE-2022-46689HIGH23 dez 2022
A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macO
68RISCO
abrir ↗
GitHub PoC★ 26
Exploits GitLab authenticated RCE vulnerability known as CVE-2022-2884.
CVE-2022-2884CRITICAL22 dez 2022
A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3
70RISCO
abrir ↗
GitHub PoC★ 93
PoC for the CVE-2022-41080 , CVE-2022-41082 and CVE-2022-41076 Vulnerabilities Affecting Microsoft Exchange Servers
CVE-2022-41082HIGHsob ataqueransomware22 dez 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 14
CVE-2021-42287/CVE-2021-42278 Exploiter
CVE-2021-42287HIGHsob ataqueransomware22 dez 2022
Active Directory Domain Services Elevation of Privilege Vulnerability
93RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2022-41080HIGHsob ataqueransomware22 dez 2022
Microsoft Exchange Server Elevation of Privilege Vulnerability
93RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2022-41082HIGHsob ataqueransomware22 dez 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALsob ataqueransomware21 dez 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC
CVE-2022-0847
CVE-2022-0847HIGHsob ataque21 dez 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗
GitHub PoC★ 2
devengpk/CVE-2022-1388
CVE-2022-1388CRITICALsob ataqueransomware21 dez 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2022-0847HIGHsob ataque21 dez 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗
GitHub PoC
this exemple of application permet to test the vunerability CVE_2017-5638
CVE-2017-5638CRITICALsob ataqueransomware21 dez 2022
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-4966CRITICALsob ataqueransomware20 dez 2022
Unauthenticated sensitive information disclosure
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-47986CRITICALsob ataqueransomware20 dez 2022
IBM Aspera Faspex code execution
100RISCO
abrir ↗
GitHub PoC★ 6
Proof of concept of CVE-2022-24086
CVE-2022-24086CRITICALsob ataque20 dez 2022
Adobe Commerce checkout improper input validation leads to remote code execution
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-24086CRITICALsob ataque20 dez 2022
Adobe Commerce checkout improper input validation leads to remote code execution
100RISCO
abrir ↗
← anteriorpágina 606 / 2.748próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.