Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

13.743 exploits

GitHub PoC

mightysai1997/cve-2021-42013.get

CVE-2021-42013CRITICALsob ataqueransomware15 set 2022

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

GitHub PoC

mightysai1997/cve-2021-42013L

CVE-2021-42013CRITICALsob ataqueransomware15 set 2022

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

GitHub PoC

mightysai1997/cve-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware15 set 2022

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

GitHub PoC★ 1

mightysai1997/CVE-2021-41773S

CVE-2021-41773HIGHsob ataqueransomware15 set 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC★ 1

mightysai1997/CVE-2021-41773m

CVE-2021-41773HIGHsob ataqueransomware15 set 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC

mightysai1997/CVE-2021-41773.git1

CVE-2021-41773HIGHsob ataqueransomware15 set 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC

mightysai1997/CVE-2021-41773-PoC

CVE-2021-41773HIGHsob ataqueransomware15 set 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC

mightysai1997/CVE-2021-41773-i-

CVE-2021-41773HIGHsob ataqueransomware15 set 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC

mightysai1997/cve-2021-41773-v-

CVE-2021-41773HIGHsob ataqueransomware15 set 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC

mightysai1997/CVE-2021-41773h

CVE-2021-41773HIGHsob ataqueransomware15 set 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC

mightysai1997/cve-2021-41773

CVE-2021-41773HIGHsob ataqueransomware15 set 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC★ 1

Free MP3 CD Ripper 2.6 版本中存在栈缓冲区溢出漏洞 (CVE-2019-9766)，远程攻击者可借助特制的 .mp3 文件利用该漏洞执行任意代码。

CVE-2019-9766—14 set 2022

Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to

23RISCO

GitHub PoC★ 2

bl4ck574r/CVE-2019-17662

CVE-2019-17662—13 set 2022

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RISCO

GitHub PoC★ 5

CVE-2022-34715-POC pcap

CVE-2022-34715CRITICAL13 set 2022

Windows Network File System Remote Code Execution Vulnerability

70RISCO

GitHub PoC

ApacheSolrRCE（CVE-2019-0193）一键写shell，原理是通过代码执行的java文件流写的马。

CVE-2019-0193HIGHsob ataque13 set 2022

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources,

100RISCO

GitHub PoC★ 7

Automation to validate the impact of the vulnerability CVE-2022-1292 on a specific system.

CVE-2022-1292CRITICAL13 set 2022

The c_rehash script allows command injection

70RISCO

GitHub PoC★ 3

CVE-2022-27925 nuclei template

CVE-2022-27925HIGHsob ataqueransomware12 set 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISCO

GitHub PoC★ 323

A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)

CVE-2022-37706HIGH12 set 2022

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and th

56RISCO

GitHub PoC★ 1

M4fiaB0y/CVE-2022-30075

CVE-2022-30075—12 set 2022

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

35RISCO

GitHub PoC★ 8

POC exploit for CVE-2015-4133

CVE-2015-4133—12 set 2022

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 f

50RISCO

GitHub PoC★ 2

CVE-2022-0847(Dirty Pipe) vulnerability exploits.

CVE-2022-0847HIGHsob ataque11 set 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

GitHub PoC★ 4

CVE-2021-38163 - exploit for SAP Netveawer

CVE-2021-38163CRITICALsob ataque10 set 2022

SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated

90RISCO

GitHub PoC★ 1

PhpMyAdmin 4.0.x—4.6.2 Remote Code Execution Vulnerability (CVE-2016-5734)

CVE-2016-5734—10 set 2022

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to

60RISCO

GitHub PoC★ 5

CVE-2022-31188 - OpenCV CVAT (Computer Vision Annotation Tool) SSRF

CVE-2022-31188HIGH09 set 2022

Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)

53RISCO

GitHub PoC★ 19

exploit for CVE-2017-1000486 vulnerability with SOCKS proxy support

CVE-2017-1000486CRITICALsob ataque09 set 2022

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RISCO

GitHub PoC

[CVE-2014-6271] Apache Shellshock Remote Command Injection tool for quick reverse shell and file browsing

CVE-2014-6271CRITICALsob ataque09 set 2022

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

GitHub PoC★ 3

CVE-2022-36446 - Webmin 1.996 Remote Code Execution

CVE-2022-36446—09 set 2022

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

60RISCO

GitHub PoC

This powershell script is intended to be used by anyone looking to remediate the Log4j Vulnerability within their environment. It can target multiple machines and run remotely as a job on all or only affected devices.

CVE-2021-44228CRITICALsob ataqueransomware08 set 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 35

A real exploit for BitBucket RCE CVE-2022-36804

CVE-2022-36804HIGHsob ataque07 set 2022

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 bef

100RISCO

GitHub PoC

Remediation for CVE-2013-3900

CVE-2013-3900MEDIUMsob ataque06 set 2022

WinVerifyTrust Signature Validation Vulnerability

75RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.