Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.058exploits catalogados
35.300CVEs com exploração pública
24.695testados em laboratório
77.058 exploits
GitHub PoC34
Exploit for CVE-2024-20767 - Adobe ColdFusion
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
GitHub PoC10
Exploit Toolkit for Adobe ColdFusion CVE-2024-20767 Vulnerability
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
GitHub PoC1
Proof of Concept for CVE-2024-20767. Arbitrary file read from Adobe ColdFusion
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
GitHub PoC1
404fu/CVE-2022-26134-POC
CVE-2022-26134CRITICALsob ataqueransomware26 mar 2024
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
GitHub PoC
NMinhTrung/LIFERAY-CVE-2020-7961
CVE-2020-7961CRITICALsob ataque26 mar 2024
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2023-38831HIGHsob ataqueransomware25 mar 2024
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir
GitHub PoC
Madan301/CVE-2024-2054
CVE-2024-2054CRITICAL25 mar 2024
Artica Proxy Unauthenticated PHP Deserialization Vulnerability
85RISCO
abrir
GitHub PoC9
evil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)
CVE-2023-38831HIGHsob ataqueransomware25 mar 2024
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir
GitHub PoC
CharonDefalt/WordPress--CVE-2022-21661
CVE-2022-21661HIGH24 mar 2024
SQL injection in WordPress
78RISCO
abrir
VulnCheck XDB
local
CVE-2021-3560HIGHsob ataque24 mar 2024
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir
GitHub PoC2
Part of my cybersecurity thesis consists in exploring and exploiting this vulnerability.
CVE-2021-3560HIGHsob ataque24 mar 2024
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir
VulnCheck XDB
infoleak
CVE-2022-21661HIGH24 mar 2024
SQL injection in WordPress
78RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware23 mar 2024
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC13
0xyassine/CVE-2023-40028
CVE-2023-40028MEDIUM23 mar 2024
Arbitrary file read via symlinks in Ghost
45RISCO
abrir
GitHub PoC1
exploit CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware23 mar 2024
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-4808423 mar 2024
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
50RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-1709CRITICALsob ataqueransomware22 mar 2024
Authentication bypass using an alternate path or channel
100RISCO
abrir
GitHub PoC
Nhom6KTLT/CVE-2010-3124
CVE-2010-312422 mar 2024
Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possib
28RISCO
abrir
GitHub PoC2
XenoM0rph97/CVE-2024-30896
CVE-2024-30896CRITICAL22 mar 2024
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows aut
48RISCO
abrir
GitHub PoC1
sxyrxyy/CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass
CVE-2024-1709CRITICALsob ataqueransomware22 mar 2024
Authentication bypass using an alternate path or channel
100RISCO
abrir
GitHub PoC1
Lilly-dox/Exploit-CVE-2023-22518
CVE-2023-22518CRITICALsob ataqueransomware21 mar 2024
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-36424HIGHsob ataque21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir
VulnCheck XDB
local
CVE-2023-28252HIGHsob ataqueransomware21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
98RISCO
abrir
GitHub PoC
JolynNgSC/Zerologon_CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware21 mar 2024
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC130
Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation
CVE-2023-36424HIGHsob ataque21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir
GitHub PoC8
POC code according to trendmicro's research
CVE-2024-21412HIGHsob ataqueransomware21 mar 2024
Internet Shortcut Files Security Feature Bypass Vulnerability
93RISCO
abrir
GitHub PoC6
it's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach
CVE-2023-28252HIGHsob ataqueransomware21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
98RISCO
abrir
anteriorpágina 414 / 2.569próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.