Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
76.066exploits catalogados
34.679CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.771VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentespopularesrisco
13.771 exploits
GitHub PoC★ 14
QNAP N-Day (Probably not CVE-2020-2509)
Command Injection Vulnerability in QTS and QuTS hero
90RISCO
abrir ↗GitHub PoC
weblogic-cve-2018-2628-exp
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RISCO
abrir ↗GitHub PoC★ 408
警惕 一种针对红队的新型溯源手段!
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISCO
abrir ↗GitHub PoC
A demo for cve-2019-12735
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via th
28RISCO
abrir ↗GitHub PoC
Module for PrestaShop 1.6.1.X/1.7.X to fix CVE-2022-31181 / CVE-2022-36408 vulnerability (Chain SQL Injection)
Remote code execution in prestashop
63RISCO
abrir ↗GitHub PoC★ 7
Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o
100RISCO
abrir ↗GitHub PoC★ 1
WebMin Versions <= 1.920 [CVE-2019-15107] RCE PoC
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗GitHub PoC★ 42
Major Security Vulnerability on PrestaShop Websites - CVE-2022-31101
SQL Injection in prestashop/blockwishlist
61RISCO
abrir ↗GitHub PoC★ 1
CVE-2014-7169 Shell Shock
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RISCO
abrir ↗GitHub PoC★ 7
远程攻击者在Confluence未经身份验证的情况下，可构造OGNL表达式进行注入，实现在Confluence Server或Data Center上执行任意代码,在现有脚本上修改了poc，方便getshell。
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗GitHub PoC★ 8
CVE-2022-23131漏洞批量检测与利用脚本
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
100RISCO
abrir ↗GitHub PoC
Mitigation/fix of CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC★ 31
Atlassian Questions Hardcoded Password (CVE-2022-26138)
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th
100RISCO
abrir ↗GitHub PoC★ 3
Detection and Remediation of the Follina MSDT Vulnerability (CVE-2022-30190)
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC★ 3
CVE-2019-17621 DLink_RCE
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated rem
100RISCO
abrir ↗GitHub PoC★ 1
NeoWans/CVE-2018-19246
PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users w
28RISCO
abrir ↗GitHub PoC★ 3
AkbarTrilaksana/cve-2022-33891
Apache Spark shell command injection vulnerability via Spark UI
100RISCO
abrir ↗GitHub PoC★ 12
CVE-2021-22205 检测脚本,支持getshell和命令执行
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISCO
abrir ↗GitHub PoC
PoC for CVE-2022-33891
Apache Spark shell command injection vulnerability via Spark UI
100RISCO
abrir ↗GitHub PoC
CVE-2007-2447 samba remote code execution
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISCO
abrir ↗GitHub PoC★ 6
CVE-2017-7921-EXP Hikvision camera
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗GitHub PoC★ 89
Apache Spark Shell Command Injection Vulnerability
Apache Spark shell command injection vulnerability via Spark UI
100RISCO
abrir ↗GitHub PoC★ 51
cve-2022-33891-poc
Apache Spark shell command injection vulnerability via Spark UI
100RISCO
abrir ↗GitHub PoC★ 31
ManageEngine PAM360, Password Manager Pro, and Access Manager Plus unauthenticated remote code execution vulnerability PoC-exploit
Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code
100RISCO
abrir ↗GitHub PoC★ 14
CVE-2021-36955
Windows Common Log File System Driver Elevation of Privilege Vulnerability
71RISCO
abrir ↗GitHub PoC
Unquoted Service Path Asus GameSdk
There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local
23RISCO
abrir ↗GitHub PoC
GitStackRCE漏洞(CVE-2018-5955)EXP
An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unau
60RISCO
abrir ↗GitHub PoC★ 2
ooooooo-q/cve-2022-32224-rails
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.
48RISCO
abrir ↗GitHub PoC★ 2
Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.