Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.359exploits catalogados

35.511CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.332GitHub PoC 14.167VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

77.360 exploits

GitHub PoC★ 3

SCM Manager XSS

CVE-2023-33829MEDIUM07 jun 2023

A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60 allows attackers to execute

33RISCO

abrir ↗

GitHub PoC★ 22

CVE-2022-39227 : Proof of Concept

CVE-2022-39227CRITICAL07 jun 2023

Python-jwt subject to Authentication Bypass by Spoofing

48RISCO

abrir ↗

GitHub PoC

Spring rce environment for CVE-2022-22965

CVE-2022-22965CRITICALsob ataque07 jun 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23488CRITICAL07 jun 2023

The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerabilit

85RISCO

abrir ↗

GitHub PoC★ 1

Paid Memberships Pro v2.9.8 (WordPress Plugin) - Unauthenticated SQL Injection

CVE-2023-23488CRITICAL07 jun 2023

The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerabilit

85RISCO

abrir ↗

GitHub PoC★ 170

CVE-2023-25157 - GeoServer SQL Injection - PoC

CVE-2023-25157CRITICAL06 jun 2023

Unfiltered SQL Injection Vulnerabilities in Geoserver

85RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-2732CRITICAL06 jun 2023

MStore API <= 3.9.2 - Authentication Bypass

75RISCO

abrir ↗

GitHub PoC

Python 2.7

CVE-2023-2732CRITICAL06 jun 2023

MStore API <= 3.9.2 - Authentication Bypass

75RISCO

abrir ↗

Exploit-DB

Tree Page View Plugin 1.6.7 - Cross Site Scripting (XSS)

CVE-2023-30868HIGHwebappsphp06 jun 2023

WordPress CMS Tree Page View Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

56RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-25157CRITICAL06 jun 2023

Unfiltered SQL Injection Vulnerabilities in Geoserver

85RISCO

abrir ↗

GitHub PoC★ 2

CVE-2023-34362-IOCs. More information on Deep Instinct's blog site.

CVE-2023-34362CRITICALsob ataqueransomware06 jun 2023

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.

100RISCO

abrir ↗

GitHub PoC★ 4

hoangprod/CVE-2021-31956-POC

CVE-2021-31956HIGHsob ataque05 jun 2023

Windows NTFS Elevation of Privilege Vulnerability

76RISCO

abrir ↗

GitHub PoC

hqdat809/CVE-2021-40444

CVE-2021-40444HIGHsob ataqueransomware05 jun 2023

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2021-40444HIGHsob ataqueransomware05 jun 2023

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

CVE-2017-9248CRITICALsob ataque05 jun 2023

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not

100RISCO

abrir ↗

GitHub PoC

MrDottt/CVE-2021-22911

CVE-2021-22911—05 jun 2023

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti

60RISCO

abrir ↗

GitHub PoC

On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition (EE) version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug.

CVE-2023-2825CRITICAL05 jun 2023

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a

85RISCO

abrir ↗

GitHub PoC

Proof of concept / CTF script for exploiting CVE-2022-46169 in Cacti, versions >=1.2.22

CVE-2022-46169CRITICALsob ataque05 jun 2023

Unauthenticated Command Injection

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALsob ataque05 jun 2023

Unauthenticated Command Injection

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-22911—05 jun 2023

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti

60RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2021-4191MEDIUM05 jun 2023

An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Priv

70RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-9248CRITICALsob ataque05 jun 2023

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2021-31956HIGHsob ataque05 jun 2023

Windows NTFS Elevation of Privilege Vulnerability

76RISCO

abrir ↗

Exploit-DB

File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE)

CVE-2023-2068—webappsphp04 jun 2023

File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

50RISCO

abrir ↗

Exploit-DB

STARFACE 7.3.0.10 - Authentication with Password Hash Possible

CVE-2023-33243HIGHwebappsjsp04 jun 2023

RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the

41RISCO

abrir ↗

VulnCheck XDB

local

CVE-2023-32784HIGH04 jun 2023

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work

41RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22965CRITICALsob ataque03 jun 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-41773HIGHsob ataqueransomware03 jun 2023

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-42013CRITICALsob ataqueransomware03 jun 2023

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

GitHub PoC★ 3

Poc&Exp,支持批量扫描,反弹shell

CVE-2022-22965CRITICALsob ataque03 jun 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.