Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.401exploits catalogados

35.511CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.332GitHub PoC 14.209VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

77.401 exploits

GitHub PoC

Este es un código del exploit CVE-2022-46169, que recree utilizando Python3! Si por ahí estás haciendo una máquina de HTB, esto te puede ser útil... 🤞✨

CVE-2022-46169CRITICALsob ataque02 mai 2023

Unauthenticated Command Injection

100RISCO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALsob ataque02 mai 2023

Unauthenticated Command Injection

100RISCO

GitHub PoC★ 1

Improved PoC for Unauthenticated RCE on Cacti <= 1.2.22 - CVE-2022-46169

CVE-2022-46169CRITICALsob ataque02 mai 2023

Unauthenticated Command Injection

100RISCO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALsob ataque02 mai 2023

Unauthenticated Command Injection

100RISCO

Exploit-DB

FS-S3900-24T4S - Privilege Escalation

CVE-2023-30350HIGHlocalhardware02 mai 2023

FS S3900-24T4S devices allow authenticated attackers with guest access to escalate their privileges and reset the admin

41RISCO

Exploit-DB

MilleGPG5 5.9.2 (Gennaio 2023) - Local Privilege Escalation / Incorrect Access Control

CVE-2023-25438HIGHlocalwindows02 mai 2023

An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalat

41RISCO

VulnCheck XDB

client-side

CVE-2022-30190HIGHsob ataqueransomware02 mai 2023

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

An exploitation of CVE-2022-30190 (Follina)

CVE-2022-30190HIGHsob ataqueransomware02 mai 2023

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

initial-access

CVE-2021-3129CRITICALsob ataqueransomware01 mai 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALsob ataque01 mai 2023

Unauthenticated Command Injection

100RISCO

GitHub PoC★ 3

Exploit for cacti version 1.2.22

CVE-2022-46169CRITICALsob ataque01 mai 2023

Unauthenticated Command Injection

100RISCO

VulnCheck XDB

local

CVE-2023-32784HIGH01 mai 2023

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work

41RISCO

GitHub PoC★ 42

This is a exploit of CVE-2022-46169 to cacti 1.2.22. This exploit allows through an RCE to obtain a reverse shell on your computer.

CVE-2022-46169CRITICALsob ataque01 mai 2023

Unauthenticated Command Injection

100RISCO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALsob ataque01 mai 2023

Unauthenticated Command Injection

100RISCO

GitHub PoC

Zoo1sondv/CVE-2021-3129

CVE-2021-3129CRITICALsob ataqueransomware01 mai 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

GitHub PoC

tuankiethkt020/Phat-hien-CVE-2017-8464

CVE-2017-8464HIGHsob ataque01 mai 2023

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

Metasploit600

Sharepoint Dynamic Proxy Generator Unauth RCE

CVE-2023-29357CRITICALsob ataqueransomware01 mai 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RISCO

Metasploit600

Sharepoint Dynamic Proxy Generator Unauth RCE

CVE-2023-24955HIGHsob ataqueransomware01 mai 2023

Microsoft SharePoint Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

zPrototype/CVE-2023-29809

CVE-2023-29809CRITICAL30 abr 2023

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit

53RISCO

GitHub PoC★ 2

Akash7350/CVE-2020-1472

CVE-2020-1472MEDIUMsob ataqueransomware30 abr 2023

Netlogon Elevation of Privilege Vulnerability

100RISCO

GitHub PoC

gretchenfrage/CVE-2023-2033-analysis

CVE-2023-2033HIGHsob ataque30 abr 2023

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corr

83RISCO

GitHub PoC

MrE-Fog/CVE-2014-0160-Chrome-Plugin

CVE-2014-0160HIGHsob ataque30 abr 2023

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC

CVE-2022-46169

CVE-2022-46169CRITICALsob ataque30 abr 2023

Unauthenticated Command Injection

100RISCO

GitHub PoC

check cve-2022-0847

CVE-2022-0847HIGHsob ataque30 abr 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

VulnCheck XDB

remote-with-credentials

CVE-2020-1472MEDIUMsob ataqueransomware30 abr 2023

Netlogon Elevation of Privilege Vulnerability

100RISCO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALsob ataque30 abr 2023

Unauthenticated Command Injection

100RISCO

GitHub PoC

Cisco r042 research

CVE-2023-20025CRITICAL30 abr 2023

A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers co

48RISCO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALsob ataque29 abr 2023

Unauthenticated Command Injection

100RISCO

GitHub PoC

PoC for CVE-2022-46169 that affects Cacti 1.2.22 version

CVE-2022-46169CRITICALsob ataque29 abr 2023

Unauthenticated Command Injection

100RISCO

GitHub PoC

zPrototype/CVE-2023-29983

CVE-2023-29983MEDIUM29 abr 2023

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary co

33RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.