Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

77.151 exploits

GitHub PoC★ 27

An authorized remote user with access or knowledge of the standard encryption key can gain access and decrypt the FortiOS backup files and all non-administator passwords, private keys and High Availability passwords.

CVE-2019-6693MEDIUMsob ataqueransomware08 dez 2023

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RISCO

VulnCheck XDB

local

CVE-2019-6693MEDIUMsob ataqueransomware08 dez 2023

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RISCO

GitHub PoC★ 8

CVE-2023-50643

CVE-2023-50643CRITICAL08 dez 2023

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode a

48RISCO

GitHub PoC

Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.

CVE-2023-4966CRITICALsob ataqueransomware08 dez 2023

Unauthenticated sensitive information disclosure

100RISCO

GitHub PoC

Check for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198

CVE-2023-20198CRITICALsob ataque08 dez 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

GitHub PoC★ 1

POC&EXP for GlassFish<4.1.1(not including 4.1.1).

CVE-2017-1000028—07 dez 2023

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RISCO

GitHub PoC★ 2

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

CVE-2023-46604CRITICALsob ataqueransomware07 dez 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

GitHub PoC★ 1

CVE-2023-28432 Minio Information isclosure Exploit

CVE-2023-28432HIGHsob ataque07 dez 2023

Minio Information Disclosure in Cluster Deployment

100RISCO

GitHub PoC

ag-rodriguez/CVE-2023-24078

CVE-2023-24078HIGH07 dez 2023

Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c

53RISCO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware07 dez 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

VulnCheck XDB

initial-access

CVE-2023-28432HIGHsob ataque07 dez 2023

Minio Information Disclosure in Cluster Deployment

100RISCO

VulnCheck XDB

infoleak

CVE-2017-1000028—07 dez 2023

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RISCO

GitHub PoC★ 2

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

CVE-2021-44228CRITICALsob ataqueransomware07 dez 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 895

BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).

CVE-2026-3609MEDIUM05 dez 2023

XIGNCODE3 xhunter1.sys kernel driver contains a Privilege Escalation Vulnerability

33RISCO

GitHub PoC★ 4

Thực nghiệm CVE-2021-44790

CVE-2021-44790—05 dez 2023

Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

45RISCO

GitHub PoC★ 38

ownCloud exploits for CVE-2023-49105

CVE-2023-49105CRITICAL05 dez 2023

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file wit

53RISCO

GitHub PoC

Proof-of-concept of CVE-2023-38831

CVE-2023-38831HIGHsob ataqueransomware04 dez 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

GitHub PoC★ 4

thanhlam-attt/CVE-2023-25690

CVE-2023-25690CRITICAL04 dez 2023

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RISCO

VulnCheck XDB

local

CVE-2019-5736—04 dez 2023

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

GitHub PoC

CygnusX-26/CVE-2022-44268-fixed-PoC

CVE-2022-44268MEDIUM04 dez 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RISCO

GitHub PoC★ 1

For Aina

CVE-2023-2024CRITICAL04 dez 2023

Improper Authentication for OpenBlue Enterprise Manager Data Collector

48RISCO

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMsob ataque04 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

VulnCheck XDB

infoleak

CVE-2023-25690CRITICAL04 dez 2023

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RISCO

GitHub PoC★ 17

A PoC exploit for CVE-2023-23752 - Joomla Improper Access Check in Versions 4.0.0 through 4.2.7

CVE-2023-23752MEDIUMsob ataque04 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

VulnCheck XDB

client-side

CVE-2023-38831HIGHsob ataqueransomware04 dez 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

GitHub PoC★ 2

A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432

CVE-2023-21839HIGHsob ataque03 dez 2023

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

100RISCO

GitHub PoC★ 2

A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432

CVE-2022-39197MEDIUMsob ataque03 dez 2023

An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote att

75RISCO

GitHub PoC★ 1

Demonstration of CVE-2023-24034 authorization bypass in Spring Security

CVE-2023-34034CRITICAL02 dez 2023

Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spr

48RISCO

GitHub PoC★ 6

creacitysec/CVE-2023-48842

CVE-2023-48842CRITICAL02 dez 2023

D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at

48RISCO

GitHub PoC★ 1

Under Construction :) Please come back later

CVE-2017-18019—01 dez 2023

In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.