Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.637exploits catalogados
34.543CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.579GitHub PoC 13.704VulnCheck XDB 8.216Nuclei 4.228Metasploit 3.467✓ só verificadosrecentespopularesrisco
13.689 exploits
GitHub PoC
Vulnerabilidad de palo alto
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗GitHub PoC★ 3
A reproduction of CVE-2019-18634, sudo privilege escalation with buffer overflow.
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the
28RISCO
abrir ↗GitHub PoC★ 13
momika233/CVE-2024-3400
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗GitHub PoC★ 2
Simple CVE-2024-24576 PoC in Julia
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RISCO
abrir ↗GitHub PoC★ 1
Python script for CMS Made Simple 2.1.6 - Remote Code Execution.
Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote
28RISCO
abrir ↗GitHub PoC★ 2
cve-2020-1938 Tomcat-Ajp-lfi.git脚本
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISCO
abrir ↗GitHub PoC★ 2
PoC MinIO vulnerability exploit
Minio Information Disclosure in Cluster Deployment
100RISCO
abrir ↗GitHub PoC
CVE-2024-21413 Setup for CW
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC
MAL-004: Command Injection Bypass for CVE-2020-12641 in Roundcube Webmail
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in
100RISCO
abrir ↗GitHub PoC
La siguiente regla YARA ayuda a detectar la presencia del backdoor en la librería liblzma comprometida en sistemas que utilizan las versiones 5.6.0 y 5.6.1 de la herramienta de compresión XZ.
Xz: malicious code in distributed source
70RISCO
abrir ↗GitHub PoC
CVE-2020-13965: Cross-Site Scripting via Malicious XML Attachment in Roundcube Webmail
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML atta
85RISCO
abrir ↗GitHub PoC★ 11
Yuvvi01/CVE-2024-3400
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗GitHub PoC★ 71
CVE-2024-3400
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗GitHub PoC★ 2
CerTusHack/CVE-2024-3400-PoC
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗GitHub PoC
FoxyProxys/CVE-2024-3400
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RISCO
abrir ↗GitHub PoC★ 335
Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
Windows Kernel Elevation of Privilege Vulnerability
83RISCO
abrir ↗GitHub PoC★ 5
OpenMetadata_RCE (CVE-2024-28255) Batch scan/exploit
Authentication Bypass in OpenMetadata
85RISCO
abrir ↗GitHub PoC★ 2
adhikara13/CVE-2024-2389
Flowmon Unauthenticated Command Injection Vulnerability
85RISCO
abrir ↗GitHub PoC★ 2
0xWhoami35/CVE-2023-23752
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗GitHub PoC★ 50
CVE-2023-6319 proof of concept
Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service
48RISCO
abrir ↗GitHub PoC★ 1
CVE-2024-24576 PoC for Nim Lang
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RISCO
abrir ↗GitHub PoC★ 1
Public exploit for CVE-2024-31777
File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted fil
48RISCO
abrir ↗GitHub PoC★ 1
Ray OS Command Injection RCE(Unauthorized)
Ray Command Injection in cpu_profile Parameter
85RISCO
abrir ↗GitHub PoC★ 20
CVE-2024-24576 Proof of Concept
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RISCO
abrir ↗GitHub PoC★ 9
brains93/CVE-2024-24576-PoC-Python
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RISCO
abrir ↗GitHub PoC★ 5
D-Link NAS Command Execution Exploit
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISCO
abrir ↗GitHub PoC★ 5
A PoC exploit for CVE-2024-3273 - D-Link Remote Code Execution RCE
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RISCO
abrir ↗GitHub PoC★ 1
The script is from https://github.com/JohnHammond/msdt-follina, just make it simple for me to use it and this script aim at generating the payload for more information refer the johnn hammond link
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.