Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

13.708 exploits

GitHub PoC

Learn more things, not suck all things

CVE-2023-1177CRITICAL20 nov 2023

Path Traversal: '\..\filename' in mlflow/mlflow

75RISCO

abrir ↗

GitHub PoC

CVE-2023-46604

CVE-2023-46604CRITICALsob ataqueransomware20 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC★ 1

Iris288/CVE-2021-41773

CVE-2021-41773HIGHsob ataqueransomware20 nov 2023

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

Polkit提权包 CVE-2021-4034 （供需要的人方便使用

CVE-2021-4034HIGHsob ataque20 nov 2023

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC

Improved code of Daniele Scanu SQL Injection exploit

CVE-2019-9053—20 nov 2023

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RISCO

abrir ↗

GitHub PoC★ 2

CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 exploit

CVE-2017-8917—20 nov 2023

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci

60RISCO

abrir ↗

GitHub PoC

Scripts to get infos

CVE-2023-4966CRITICALsob ataqueransomware20 nov 2023

Unauthenticated sensitive information disclosure

100RISCO

abrir ↗

GitHub PoC

A POC of a type confusion bug in chakracore framework that leads to code execute.

CVE-2019-0567—19 nov 2023

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RISCO

abrir ↗

GitHub PoC

rhymsc/CVE-2022-44877-RCE

CVE-2022-44877CRITICALsob ataque18 nov 2023

100RISCO

abrir ↗

GitHub PoC

wshinkle/CVE-2023-2982

CVE-2023-2982CRITICAL18 nov 2023

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

75RISCO

abrir ↗

GitHub PoC★ 3

NKeshawarz/CVE-2023-46604-RCE

CVE-2023-46604CRITICALsob ataqueransomware18 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC★ 13

Quick test for CVE-2023-26025 behaviours

CVE-2023-36025HIGHsob ataque17 nov 2023

Windows SmartScreen Security Feature Bypass Vulnerability

93RISCO

abrir ↗

GitHub PoC★ 52

exploit for cve-2023-47246 SysAid RCE (shell upload)

CVE-2023-47246CRITICALsob ataqueransomware17 nov 2023

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f

100RISCO

abrir ↗

GitHub PoC★ 64

CVE-2023-20198 Exploit PoC

CVE-2023-20198CRITICALsob ataque16 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

abrir ↗

GitHub PoC

SynixCyberCrimeMY CVE Exploiter By SamuraiMelayu1337 & ?/h4zzzzzz.scc

CVE-2022-29464CRITICALsob ataqueransomware16 nov 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2023-46604环境复现包

CVE-2023-46604CRITICALsob ataqueransomware16 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC

POC repo for CVE-2023-46604

CVE-2023-46604CRITICALsob ataqueransomware15 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC★ 4

WinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572漏洞复现

CVE-2023-38831HIGHsob ataqueransomware15 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

GitHub PoC

Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)

CVE-2023-36845CRITICALsob ataque15 nov 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISCO

abrir ↗

GitHub PoC★ 2

An improved POC exploit based on the reported CVE on exploitdb

CVE-2023-32707HIGH14 nov 2023

‘edit_user’ Capability Privilege Escalation

78RISCO

abrir ↗

GitHub PoC

NataliSemi/-CVE-2022-44268

CVE-2022-44268MEDIUM14 nov 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RISCO

abrir ↗

GitHub PoC

Обнаружение эксплойта CVE-2023-28252

CVE-2023-28252HIGHsob ataqueransomware13 nov 2023

Windows Common Log File System Driver Elevation of Privilege Vulnerability

98RISCO

abrir ↗

GitHub PoC

Log4j Vulnerability RCE - CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware13 nov 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC★ 3

MrR0b0t19/CVE-2023-41064

CVE-2023-41064HIGHsob ataque13 nov 2023

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1

76RISCO

abrir ↗

GitHub PoC★ 18

This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol.

CVE-2023-46604CRITICALsob ataqueransomware12 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

abrir ↗

GitHub PoC

Spring4Shell Vulnerability RCE - CVE-2022-22965

CVE-2022-22965CRITICALsob ataque12 nov 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

GitHub PoC★ 3

huiwen-yayaya/CVE-2023-4863

CVE-2023-4863HIGHsob ataque11 nov 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

GitHub PoC

ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022—11 nov 2023

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands

23RISCO

abrir ↗

GitHub PoC

A simple exploit for CVE-2019-2725.

CVE-2019-2725HIGHsob ataqueransomware11 nov 2023

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISCO

abrir ↗

GitHub PoC

exp

CVE-2023-34039CRITICAL10 nov 2023

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g

75RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.