Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
76.496exploits catalogados
34.964CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentespopularesrisco
13.885 exploits
GitHub PoC
Metabase GeoJSON map local file inclusion
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISCO
abrir ↗GitHub PoC
Python 3 script to identify CVE-2021-26084 via network requests.
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗GitHub PoC★ 4
Vulnmachines/Metabase_CVE-2021-41277
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISCO
abrir ↗GitHub PoC
plugin made for LeakiX
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISCO
abrir ↗GitHub PoC★ 83
Microsoft Exchange Server Poc
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC★ 17
对Exchange Proxyshell 做了二次修改，精确的拆分、实现辅助性安全测试。
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC
Metabase 任意文件读取
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISCO
abrir ↗GitHub PoC
MetaBase 任意文件读取漏洞 fofa批量poc
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISCO
abrir ↗GitHub PoC★ 5
simple program for exploit metabase
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISCO
abrir ↗GitHub PoC★ 2
CrackerCat/CVE-2021-26411
Internet Explorer Memory Corruption Vulnerability
93RISCO
abrir ↗GitHub PoC
Alexcot25051999/CVE-2021-40444
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC
A write up on the THM room Vulnerability Capstone & Exploit script for CVE-2018-16763.
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
abrir ↗GitHub PoC★ 4
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell) RCE
Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra
38RISCO
abrir ↗GitHub PoC★ 11
PoC for CVE-2021-41277
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RISCO
abrir ↗GitHub PoC
CVE-2021-43617 bypass CRF
Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Val
28RISCO
abrir ↗GitHub PoC★ 1
CVE-2013-2171
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEAS
38RISCO
abrir ↗GitHub PoC
cve-2020-35314,一个带phpcode的zip文件
A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, al
28RISCO
abrir ↗GitHub PoC★ 1
PoC for CVE-2017-17562 written in bash
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. T
100RISCO
abrir ↗GitHub PoC
Demonstration of CVE-2018-19571: GitLab SSRF CVE
GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an
28RISCO
abrir ↗GitHub PoC
Confluence server webwork OGNL injection
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path tr
100RISCO
abrir ↗GitHub PoC★ 34
CVE-2020-0787的简单回显
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperl
98RISCO
abrir ↗GitHub PoC★ 117
Exploit for command injection vulnerability found in uhttpd binary from TP-Link Tapo c200 IP camera
TP-LINK Tapo C200 remote code execution vulnerability
70RISCO
abrir ↗GitHub PoC★ 1
poc for CVE-2020-2555
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su
100RISCO
abrir ↗GitHub PoC★ 3
Repo demonstrating CVE-2021-43616 / https://github.com/npm/cli/issues/2701
The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in pack
48RISCO
abrir ↗GitHub PoC
POC for CVE-2020-2883
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RISCO
abrir ↗GitHub PoC
xMohamed0/CVE-2021-42013-ApacheRCE
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
abrir ↗GitHub PoC★ 1
kubota/POC-CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC
xMohamed0/CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC★ 8
Exploit for CVE-2017-17562 vulnerability, that allows RCE on GoAhead (< v3.6.5) if the CGI is enabled and a CGI program is dynamically linked.
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. T
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.