Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.020exploits catalogados
35.276CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentespopularesrisco
76.647 exploits
GitHub PoC
Vietnam National Cyber Security (NCS)'s Internship - 2nd Test
Argument Injection in PHP-CGI
100RISCO
abrir ↗GitHub PoC
Rejetto http File Server 2.3.x (Reverse shell)
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RISCO
abrir ↗VulnCheck XDB
initial-access
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated att
100RISCO
abrir ↗VulnCheck XDB
initial-access
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RISCO
abrir ↗GitHub PoC
raytran54/CVE-2018-7600
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISCO
abrir ↗GitHub PoC★ 4
jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE
Apache HugeGraph-Server: Command execution in gremlin
100RISCO
abrir ↗GitHub PoC★ 4
NanoWraith/CVE-2024-23692
Rejetto HTTP File Server 2.3m Unauthenticated RCE
100RISCO
abrir ↗GitHub PoC
PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC
Argument Injection in PHP-CGI
100RISCO
abrir ↗GitHub PoC
Basic POC to test CVE-2024-3094 vulnerability inside K8s cluster
Xz: malicious code in distributed source
70RISCO
abrir ↗GitHub PoC★ 29
CVE-2024-37051 poc and exploit
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ
48RISCO
abrir ↗Metasploit300
Magento XXE Unserialize Arbitrary File Read
XXE can expose crypt key and other secrets granting full admin access
100RISCO
abrir ↗GitHub PoC
CVE-2022-36446 POC 실습
software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.
60RISCO
abrir ↗Metasploit600
Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes
Win32k Elevation of Privilege Vulnerability
36RISCO
abrir ↗VulnCheck XDB
local
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an I
41RISCO
abrir ↗Metasploit600
Windows Access Mode Mismatch LPE in ks.sys
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
91RISCO
abrir ↗GitHub PoC★ 1
Vulnerability check script for CVE-2024-37393 (SecurEnvoy MFA 9.4.513)
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-suppl
63RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.