Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.900exploits catalogados
34.597CVEs com exploração pública
24.695testados em laboratório
13.689 exploits
GitHub PoC
PoC for CVE-2023-4911 LooneyTuneables
CVE-2023-4911HIGHsob ataque14 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
GitHub PoC3
Confluence Broken Access Control
CVE-2023-22515CRITICALsob ataqueransomware13 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC6
Confluence Data Center & Server 权限提升漏洞 Exploit
CVE-2023-22515CRITICALsob ataqueransomware13 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC1
iveresk-CVE-2023-22515
CVE-2023-22515CRITICALsob ataqueransomware13 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC76
Tool for testing mitigations and exposure to Rapid Reset DDoS (CVE-2023-44487)
CVE-2023-44487HIGHsob ataque13 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
GitHub PoC
Vagebondcur/IMAGE-MAGICK-CVE-2022-44268
CVE-2022-44268MEDIUM13 out 2023
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISCO
abrir
GitHub PoC63
xortigate-cve-2023-27997
CVE-2023-27997CRITICALsob ataqueransomware12 out 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RISCO
abrir
GitHub PoC25
Confluence Unauthorized Administrator User Addition Exploitation Script
CVE-2023-22515CRITICALsob ataqueransomware12 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC1
ruycr4ft/CVE-2023-38831
CVE-2023-38831HIGHsob ataqueransomware12 out 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir
GitHub PoC9
delsploit/CVE-2023-27997
CVE-2023-27997CRITICALsob ataqueransomware12 out 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RISCO
abrir
GitHub PoC
CVE-2023-44487
CVE-2023-44487HIGHsob ataque12 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
GitHub PoC
Test Script for CVE-2023-44487
CVE-2023-44487HIGHsob ataque12 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
GitHub PoC
Security Vulnerability - Kardex Mlog MCC
CVE-2023-22855CRITICAL11 out 2023
Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 808
53RISCO
abrir
GitHub PoC5
CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server
CVE-2023-22515CRITICALsob ataqueransomware11 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC110
Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具
CVE-2023-22515CRITICALsob ataqueransomware11 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC18
CVE-2023-4911
CVE-2023-4911HIGHsob ataque11 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
GitHub PoC56
Proof of concept for DoS exploit
CVE-2023-44487HIGHsob ataque11 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
GitHub PoC
CVE-2023-4911
CVE-2023-4911HIGHsob ataque10 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
GitHub PoC
Apache Superset 默认SECRET_KEY 漏洞(CVE-2023-27524)
CVE-2023-27524HIGHsob ataque10 out 2023
Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
100RISCO
abrir
GitHub PoC29
hadrian3689/looney-tunables-CVE-2023-4911
CVE-2023-4911HIGHsob ataque10 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
GitHub PoC
Openfire未授权到RCE(CVE-2023-32315)复现
CVE-2023-32315HIGHsob ataque10 out 2023
Openfire administration console authentication bypass
100RISCO
abrir
GitHub PoC2
Recreation of the SharePoint PoC for CVE-2023-29357 in C# from LuemmelSec
CVE-2023-29357CRITICALsob ataqueransomware10 out 2023
Microsoft SharePoint Server Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC153
CVE-2023-22515: Confluence Broken Access Control Exploit
CVE-2023-22515CRITICALsob ataqueransomware10 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC246
Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487
CVE-2023-44487HIGHsob ataque10 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
GitHub PoC8
Poc for CVE-2023-22515
CVE-2023-22515CRITICALsob ataqueransomware10 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
GitHub PoC1
WebAccess远程命令执行漏洞(CVE-2017-16720)复现
CVE-2017-1672010 out 2023
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within th
35RISCO
abrir
GitHub PoC
An implementation of a proof-of-concept for CVE-2018-5767 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5767)
CVE-2018-576709 out 2023
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code
35RISCO
abrir
GitHub PoC164
LPE exploit for CVE-2023-36802
CVE-2023-36802HIGHsob ataque09 out 2023
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
76RISCO
abrir
GitHub PoC1
xiaoQ1z/CVE-2023-4911
CVE-2023-4911HIGHsob ataque08 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
GitHub PoC16
A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.
CVE-2023-5217HIGHsob ataque06 out 2023
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo
83RISCO
abrir
anteriorpágina 255 / 457próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.