Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

13.771 exploits

GitHub PoC

Vulnearability Report of the New Jersey official site

CVE-2019-11358—23 mai 2022

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RISCO

abrir ↗

GitHub PoC★ 1

Vulnearability Report of the New Jersey official site

CVE-2020-11022MEDIUM23 mai 2022

jQuery has a potential XSS vulnerability

55RISCO

abrir ↗

GitHub PoC★ 2

CVE 2005 exploit.Perl in Perl.

CVE-2005-3299—22 mai 2022

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to in

28RISCO

abrir ↗

GitHub PoC

pashayogi/CVE-2020-7961-Mass

CVE-2020-7961CRITICALsob ataque22 mai 2022

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c

100RISCO

abrir ↗

GitHub PoC★ 85

🍵 Gitea repository migration remote command execution exploit.

CVE-2022-30781—22 mai 2022

Gitea before 1.16.7 does not escape git fetch remote.

60RISCO

abrir ↗

GitHub PoC★ 2

A Simple bash script that patches the CVE-2022-0847 (dirty pipe) kernel vulnerability on Debian 11

CVE-2022-0847HIGHsob ataque21 mai 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

abrir ↗

GitHub PoC★ 2

BabyTeam1024/CVE-2022-26318

CVE-2022-26318CRITICALsob ataque21 mai 2022

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulner

100RISCO

abrir ↗

GitHub PoC★ 10

CVE-2021-4034 for single commcand

CVE-2021-4034HIGHsob ataque21 mai 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC★ 29

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

CVE-2022-24706CRITICALsob ataque20 mai 2022

Remote Code Execution Vulnerability in Packaging

100RISCO

abrir ↗

GitHub PoC★ 6

Verifed Proof of Concept on CVE-2022-24086

CVE-2022-24086CRITICALsob ataque19 mai 2022

Adobe Commerce checkout improper input validation leads to remote code execution

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2022-22965 Spring4Shell research & PoC

CVE-2022-22965CRITICALsob ataque19 mai 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

GitHub PoC

CVE-2022-30525 Zyxel防火墙命令注入漏洞 POC&EXP

CVE-2022-30525CRITICALsob ataque19 mai 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISCO

abrir ↗

GitHub PoC★ 7

一个可单独、批量验证的脚本，也可以反弹shell

CVE-2022-22947CRITICALsob ataque19 mai 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISCO

abrir ↗

GitHub PoC

PoC for Dirty COW (CVE-2016-5195)

CVE-2016-5195HIGHsob ataque19 mai 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

abrir ↗

GitHub PoC★ 7

Exploit for CVE-2020-5844 (Pandora FMS v7.0NG.742) - Remote Code Execution

CVE-2020-5844—19 mai 2022

index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators t

35RISCO

abrir ↗

GitHub PoC

Franklin Fueling Systems Colibri Controller Module - Local File Inclusion

CVE-2021-46417—18 mai 2022

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privilege

50RISCO

abrir ↗

GitHub PoC★ 1

The Repository contains documents that explains the explotation of CVE-2016-5195

CVE-2016-5195HIGHsob ataque18 mai 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

abrir ↗

GitHub PoC★ 4

Simple python script to exploit CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

CVE-2022-30525CRITICALsob ataque18 mai 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISCO

abrir ↗

GitHub PoC★ 2

This repository is developed to analysis and understand DirtyPipe exploit CVE-2022-0847

CVE-2022-0847HIGHsob ataque17 mai 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust

CVE-2022-1388CRITICALsob ataqueransomware17 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC

Wrin9/CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware16 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC

user16-et/cve-2021-21972_PoC

CVE-2021-21972CRITICALsob ataqueransomware16 mai 2022

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2022-30525 POC exploit

CVE-2022-30525CRITICALsob ataque16 mai 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISCO

abrir ↗

GitHub PoC

Persistent XSS on 'last_known_version' field (My Settings)

CVE-2022-28598—16 mai 2022

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-contro

23RISCO

abrir ↗

GitHub PoC★ 3

CVE-2022-30525（Zxyel 防火墙命令注入）的概念证明漏洞利用

CVE-2022-30525CRITICALsob ataque16 mai 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISCO

abrir ↗

GitHub PoC★ 61

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）注入哥斯拉内存马

CVE-2022-22947CRITICALsob ataque16 mai 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISCO

abrir ↗

GitHub PoC★ 1

Multithread Golang application

CVE-2022-21907CRITICAL16 mai 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 7

Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

CVE-2008-0166—15 mai 2022

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RISCO

abrir ↗

GitHub PoC★ 14

An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell

CVE-2022-1388CRITICALsob ataqueransomware15 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 1

Improved POC for CVE-2022-1388 that affects multiple F5 products.

CVE-2022-1388CRITICALsob ataqueransomware15 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.