Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados
34.679CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentespopularesrisco
13.743 exploits
GitHub PoC
CVE-2022-1388 | F5 - Big IP Pre Auth RCE via '/mgmt/tm/util/bash' endpoint
CVE-2022-1388CRITICALsob ataqueransomware21 jun 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC
cve-2021-22005vcenter任意文件上传漏洞，可直接上传冰蝎
CVE-2021-22005CRITICALsob ataqueransomware21 jun 2022
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw
100RISCO
abrir ↗
GitHub PoC★ 3
Telesquare SDT-CW3B1 1.1.0 - OS Command Injection
CVE-2021-46422—20 jun 2022
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute
60RISCO
abrir ↗
GitHub PoC★ 1
CVE-2022-1388 | F5 - Big IP Pre Auth RCE via '/mgmt/tm/util/bash' endpoint
CVE-2022-1388CRITICALsob ataqueransomware20 jun 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC
Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit
CVE-2019-17662—19 jun 2022
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi
60RISCO
abrir ↗
GitHub PoC★ 154
burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977
CVE-2022-22965CRITICALsob ataque19 jun 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir ↗
GitHub PoC★ 14
「💥」CVE-2022-26134 - Confluence Pre-Auth RCE
CVE-2022-26134CRITICALsob ataqueransomware19 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
GitHub PoC★ 1
wlensinas/CVE-2002-1614
CVE-2002-1614—18 jun 2022
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
23RISCO
abrir ↗
GitHub PoC
unauthorized RcE exploit for webnin < 1.920
CVE-2019-15107CRITICALsob ataqueransomware17 jun 2022
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗
GitHub PoC
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.
CVE-2021-41773HIGHsob ataqueransomware17 jun 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 86
Windows Network File System Crash PoC
CVE-2022-26937CRITICAL17 jun 2022
Windows Network File System Remote Code Execution Vulnerability
70RISCO
abrir ↗
GitHub PoC
🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.
CVE-2025-55182CRITICALsob ataqueransomware17 jun 2022
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
0xF331-D3AD/CVE-2012-2982
CVE-2012-2982—16 jun 2022
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid
50RISCO
abrir ↗
GitHub PoC
p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor
CVE-2017-7921CRITICALsob ataque15 jun 2022
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗
GitHub PoC
follina zero day vulnerability to help Microsoft to mitigate the attack
CVE-2022-30190HIGHsob ataqueransomware15 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 31
Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files
CVE-2022-30190HIGHsob ataqueransomware15 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
notherealhazard/follina-CVE-2022-30190
CVE-2022-30190HIGHsob ataqueransomware15 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
This repository is developed to understand CVE-2019-6447
CVE-2019-6447—15 jun 2022
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi
50RISCO
abrir ↗
GitHub PoC
ernestak/Sigma-Rule-for-CVE-2022-30190
CVE-2022-30190HIGHsob ataqueransomware14 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
ernestak/CVE-2022-30190
CVE-2022-30190HIGHsob ataqueransomware14 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 1
CVE-2022-22620: Use-after-free in Safari
CVE-2022-22620HIGHsob ataque14 jun 2022
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS
76RISCO
abrir ↗
GitHub PoC★ 1
I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits
CVE-2022-24706CRITICALsob ataque14 jun 2022
Remote Code Execution Vulnerability in Packaging
100RISCO
abrir ↗
GitHub PoC
WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm
CVE-2017-10271HIGHsob ataqueransomware14 jun 2022
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISCO
abrir ↗
GitHub PoC★ 2
An Unofficial Patch Follina CVE-2022-30190 (patch) by micrisoft Guidelines.
CVE-2022-30190HIGHsob ataqueransomware13 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina
CVE-2022-30190HIGHsob ataqueransomware13 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 1
CVE-2022-30525 POC
CVE-2022-30525CRITICALsob ataque13 jun 2022
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISCO
abrir ↗
GitHub PoC★ 4
CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection
CVE-2022-26134CRITICALsob ataqueransomware13 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
GitHub PoC★ 106
PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.
CVE-2022-26809CRITICAL13 jun 2022
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RISCO
abrir ↗
GitHub PoC★ 1
A OS Command Injection Vulnerability in the CGI Program of Zyxel
CVE-2022-30525CRITICALsob ataque12 jun 2022
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISCO
abrir ↗
GitHub PoC★ 2
seymanurmutlu/CVE-2022-24086-CVE-2022-24087
CVE-2022-24086CRITICALsob ataque12 jun 2022
Adobe Commerce checkout improper input validation leads to remote code execution
100RISCO
abrir ↗
← anteriorpágina 305 / 459próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.