Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

13.885 exploits

GitHub PoC

docker lab setup for kibana-7609

CVE-2019-7609CRITICALsob ataque10 fev 2022

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker

100RISCO

abrir ↗

GitHub PoC★ 2

An "Incorrect Use of a Privileged API" vulnerability in PrintixService.exe, in Printix's "Printix Secure Cloud Print Management", Version 1.3.1106.0 and below allows a Local Or Remote attacker the ability change all HKEY Windows Registry values as SYSTEM context via the UITasks.PersistentRegistryData parameter.

CVE-2022-25089—10 fev 2022

Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL

28RISCO

abrir ↗

GitHub PoC★ 795

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

CVE-2022-21999HIGHsob ataqueransomware08 fev 2022

Windows Print Spooler Elevation of Privilege Vulnerability

98RISCO

abrir ↗

GitHub PoC

CVE-2012-1876 win7_x86和x64平台分析，EXP、POC代码和分析文档

CVE-2012-1876—08 fev 2022

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo

50RISCO

abrir ↗

GitHub PoC★ 2

Worm written in python, abuses CVE-2020-7247

CVE-2020-7247CRITICALsob ataque07 fev 2022

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

abrir ↗

GitHub PoC★ 10

kernel exploit

CVE-2015-1328—07 fev 2022

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

50RISCO

abrir ↗

GitHub PoC★ 237

Cisco Anyconnect VPN unauth RCE (rwx stack)

CVE-2022-20699CRITICALsob ataque07 fev 2022

Cisco Small Business RV Series Routers Vulnerabilities

100RISCO

abrir ↗

GitHub PoC★ 49

lpe poc for cve-2022-21882

CVE-2022-21882HIGHsob ataque07 fev 2022

Win32k Elevation of Privilege Vulnerability

98RISCO

abrir ↗

GitHub PoC★ 6

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) proof of concept exploit

CVE-2020-35749—06 fev 2022

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2

50RISCO

abrir ↗

GitHub PoC

giardinas-dev/audit-xss-cve-2020-7934

CVE-2020-7934—04 fev 2022

In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyA

23RISCO

abrir ↗

GitHub PoC

IAmNewbieZ/CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware04 fev 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC★ 8

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec in Python

CVE-2021-4034HIGHsob ataque04 fev 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC★ 1

Apache HTTP Server 2.4.50 - RCE Lab

CVE-2021-42013CRITICALsob ataqueransomware03 fev 2022

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

GitHub PoC

Kayky-cmd/CVE-2019-6447--.

CVE-2019-6447—03 fev 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISCO

abrir ↗

GitHub PoC★ 196

L4ys/CVE-2022-21882

CVE-2022-21882HIGHsob ataque03 fev 2022

Win32k Elevation of Privilege Vulnerability

98RISCO

abrir ↗

GitHub PoC

qkrtjsrbs315/CVE-2013-1763

CVE-2013-1763—01 fev 2022

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RISCO

abrir ↗

GitHub PoC★ 8

CVE-2022-21882

CVE-2022-21882HIGHsob ataque01 fev 2022

Win32k Elevation of Privilege Vulnerability

98RISCO

abrir ↗

GitHub PoC

Study on Linux kernel code injection via CVE-2014-3153 (Towelroot)

CVE-2014-3153HIGHsob ataque01 fev 2022

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff

98RISCO

abrir ↗

GitHub PoC★ 9

CVE-2021-3560 analysis

CVE-2021-3560HIGHsob ataque31 jan 2022

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISCO

abrir ↗

GitHub PoC

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

CVE-2017-0213HIGHsob ataqueransomware29 jan 2022

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser

93RISCO

abrir ↗

GitHub PoC★ 3

CVE-2013-3660的x64 win7平台EXP源代码，成功率100%。

CVE-2013-3660HIGHsob ataque29 jan 2022

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo

98RISCO

abrir ↗

GitHub PoC★ 1

pwnkit

CVE-2021-4034HIGHsob ataque28 jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC

galoget/PwnKit-CVE-2021-4034

CVE-2021-4034HIGHsob ataque28 jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC

BrunoPincho/cve-2018-16763-rust

CVE-2018-16763—27 jan 2022

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISCO

abrir ↗

GitHub PoC★ 4

CVE-2021-4034 PoC , polkit < 0.131

CVE-2021-4034HIGHsob ataque27 jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC

khaclep007/CVE-2022-0185

CVE-2022-0185HIGHsob ataque27 jan 2022

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RISCO

abrir ↗

GitHub PoC★ 351

Proof of concept for pwnkit vulnerability

CVE-2021-4034HIGHsob ataque27 jan 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC★ 462

win32k LPE

CVE-2022-21882HIGHsob ataque27 jan 2022

Win32k Elevation of Privilege Vulnerability

98RISCO

abrir ↗

GitHub PoC★ 11

CVE-2021-3156 POC and Docker and Analysis write up

CVE-2021-3156HIGHsob ataque27 jan 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

abrir ↗

GitHub PoC

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689

CVE-2018-14009—27 jan 2022

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.