Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

13.727 exploits

GitHub PoC★ 3

Python Interactive Exploit for WP File Manager Vulnerability. The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension.

CVE-2020-25213CRITICALsob ataque02 ago 2023

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra

100RISCO

GitHub PoC★ 1

CVE-2020-0688 modified exploit for Exchange 2010

CVE-2020-0688HIGHsob ataqueransomware02 ago 2023

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

GitHub PoC

overgrowncarrot1/DejaVu-CVE-2021-22205

CVE-2021-22205CRITICALsob ataqueransomware02 ago 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

GitHub PoC★ 4

Exploit CVE-2021-41773 and CVE-2021-42013

CVE-2021-41773HIGHsob ataqueransomware02 ago 2023

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC

726232111/CVE-2023-28252

CVE-2023-28252HIGHsob ataqueransomware02 ago 2023

Windows Common Log File System Driver Elevation of Privilege Vulnerability

98RISCO

GitHub PoC

CVE-2022-1388 - F5 Router RCE Replica

CVE-2022-1388CRITICALsob ataqueransomware01 ago 2023

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 2

Nmap NSE script to dump / test Solarwinds CVE-2023-23333 vulnerability

CVE-2023-23333CRITICAL01 ago 2023

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassin

85RISCO

GitHub PoC★ 14

Mehran-Seifalinia/CVE-2023-37979

CVE-2023-37979HIGH01 ago 2023

WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)

61RISCO

GitHub PoC

Unauthenticated Command Injection in Cacti <= 1.2.22

CVE-2022-46169CRITICALsob ataque01 ago 2023

Unauthenticated Command Injection

100RISCO

GitHub PoC★ 1

Nmap script to exploit CVE-2023-35078 - Mobile Iron Core

CVE-2023-35078CRITICALsob ataqueransomware01 ago 2023

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re

100RISCO

GitHub PoC

Easy and non-intrusive script to check for CVE-2023-35078

CVE-2023-35078CRITICALsob ataqueransomware31 jul 2023

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re

100RISCO

GitHub PoC★ 5

Tools to scanner & exploit cve-2023-35078

CVE-2023-35078CRITICALsob ataqueransomware31 jul 2023

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re

100RISCO

GitHub PoC

GeoServer OGC Filter SQL Injection Vulnerabilities

CVE-2023-25157CRITICAL31 jul 2023

Unfiltered SQL Injection Vulnerabilities in Geoserver

85RISCO

GitHub PoC★ 3

Perform With Mass Remote Code Execution In SPIP Version (4.2.1)

CVE-2023-27372CRITICAL31 jul 2023

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

85RISCO

GitHub PoC

timsonner/cve-2014-0160-heartbleed

CVE-2014-0160HIGHsob ataque31 jul 2023

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 1

#comeonits2023 #ie9 #Storm-0978

CVE-2023-36884HIGHsob ataqueransomware30 jul 2023

Windows Search Remote Code Execution Vulnerability

93RISCO

GitHub PoC

Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)

CVE-2022-26134CRITICALsob ataqueransomware30 jul 2023

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

GitHub PoC

cashapp323232/CVE-2023-2868CVE-2023-2868

CVE-2023-2868CRITICALsob ataque30 jul 2023

Remote Code injection in Barracuda Email Security Gateway

100RISCO

GitHub PoC

Pseudo shell for CVE-2013-0156.

CVE-2013-0156—29 jul 2023

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISCO

GitHub PoC★ 9

CVE-2023-22884 PoC

CVE-2023-22884CRITICAL29 jul 2023

Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

53RISCO

GitHub PoC★ 117

CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC

CVE-2023-35078CRITICALsob ataqueransomware29 jul 2023

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re

100RISCO

GitHub PoC★ 5

Proof of concept script to check if the site is vulnerable to CVE-2023-35078

CVE-2023-35078CRITICALsob ataqueransomware29 jul 2023

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re

100RISCO

GitHub PoC

JohnGilbert57/CVE-2021-4034-Capture-the-flag

CVE-2021-4034HIGHsob ataque28 jul 2023

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

GitHub PoC★ 17

Voyag3r-Security/CVE-2023-1389

CVE-2023-1389HIGHsob ataque28 jul 2023

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RISCO

GitHub PoC★ 2

ridsoliveira/Fix-CVE-2023-36884

CVE-2023-36884HIGHsob ataqueransomware28 jul 2023

Windows Search Remote Code Execution Vulnerability

93RISCO

GitHub PoC★ 1

Exploit for the vulnerability of Ultimate Member Plugin.

CVE-2023-3460—27 jul 2023

Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

60RISCO

GitHub PoC★ 2

CVE-2021-3129 | Laravel Debug Mode Vulnerability

CVE-2021-3129CRITICALsob ataqueransomware27 jul 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

GitHub PoC

Laravel RCE (CVE-2021-3129)

CVE-2021-3129CRITICALsob ataqueransomware26 jul 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

GitHub PoC

simple program for joomla scanner CVE-2023-23752 with target list

CVE-2023-23752MEDIUMsob ataque26 jul 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

GitHub PoC★ 2

Python script to exploit PlaySMS before 1.4.3

CVE-2020-8644CRITICALsob ataque25 jul 2023

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.