Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.902exploits catalogados
34.597CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentespopularesrisco
13.689 exploits
GitHub PoC★ 2
Nmap NSE script to dump / test Solarwinds CVE-2023-23333 vulnerability
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassin
85RISCO
abrir ↗GitHub PoC
CVE-2022-1388 - F5 Router RCE Replica
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗GitHub PoC★ 3
Perform With Mass Remote Code Execution In SPIP Version (4.2.1)
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗GitHub PoC★ 5
Tools to scanner & exploit cve-2023-35078
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re
100RISCO
abrir ↗GitHub PoC
Easy and non-intrusive script to check for CVE-2023-35078
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re
100RISCO
abrir ↗GitHub PoC
timsonner/cve-2014-0160-heartbleed
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISCO
abrir ↗GitHub PoC
GeoServer OGC Filter SQL Injection Vulnerabilities
Unfiltered SQL Injection Vulnerabilities in Geoserver
85RISCO
abrir ↗GitHub PoC
Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗GitHub PoC★ 1
#comeonits2023 #ie9 #Storm-0978
Windows Search Remote Code Execution Vulnerability
93RISCO
abrir ↗GitHub PoC
cashapp323232/CVE-2023-2868CVE-2023-2868
Remote Code injection in Barracuda Email Security Gateway
100RISCO
abrir ↗GitHub PoC★ 117
CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re
100RISCO
abrir ↗GitHub PoC★ 5
Proof of concept script to check if the site is vulnerable to CVE-2023-35078
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re
100RISCO
abrir ↗GitHub PoC★ 9
CVE-2023-22884 PoC
Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow
53RISCO
abrir ↗GitHub PoC
Pseudo shell for CVE-2013-0156.
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an
60RISCO
abrir ↗GitHub PoC
JohnGilbert57/CVE-2021-4034-Capture-the-flag
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗GitHub PoC★ 17
Voyag3r-Security/CVE-2023-1389
TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i
100RISCO
abrir ↗GitHub PoC★ 2
ridsoliveira/Fix-CVE-2023-36884
Windows Search Remote Code Execution Vulnerability
93RISCO
abrir ↗GitHub PoC★ 1
Exploit for the vulnerability of Ultimate Member Plugin.
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISCO
abrir ↗GitHub PoC★ 2
CVE-2021-3129 | Laravel Debug Mode Vulnerability
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISCO
abrir ↗GitHub PoC
Laravel RCE (CVE-2021-3129)
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISCO
abrir ↗GitHub PoC
simple program for joomla scanner CVE-2023-23752 with target list
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir ↗GitHub PoC
Challenge based on CVE-2021-22204 where users send a malicious file to a web application to gain RCE
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISCO
abrir ↗GitHub PoC★ 2
Python script to exploit PlaySMS before 1.4.3
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2022-23305 Log4J JDBCAppender SQl injection POC
SQL injection in JDBC Appender in Apache Log4j V1
60RISCO
abrir ↗GitHub PoC★ 1
Learn what is BlueJam CVE-2017-0781
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1
28RISCO
abrir ↗GitHub PoC★ 46
A PoC exploit for CVE-2017-7921 - Hikvision Camera Series Improper Authentication Vulnerability.
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗GitHub PoC★ 1
ImageMagick Arbitrary Read Files - CVE-2022-44268
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISCO
abrir ↗GitHub PoC★ 11
CVE-2023-3519 vuln for nuclei scanner
Unauthenticated remote code execution
100RISCO
abrir ↗GitHub PoC★ 1
NetScaler (Citrix ADC) CVE-2023-3519 Scanner
Unauthenticated remote code execution
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.