Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

13.743 exploits

GitHub PoC

yigexioabai/CVE-2021-46422_RCE

CVE-2021-46422—15 out 2022

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RISCO

abrir ↗

GitHub PoC★ 3

CVE-2021-46422漏洞

CVE-2021-46422—15 out 2022

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RISCO

abrir ↗

GitHub PoC★ 2

Fortinet Critical Authentication Bypass Vulnerability (CVE-2022-40684) [ Mass Exploit ]

CVE-2022-40684CRITICALsob ataqueransomware15 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC★ 7

Fortinet Critical Authentication Bypass Vulnerability (CVE-2022-40684) [ Mass Exploit ]

CVE-2022-40684CRITICALsob ataqueransomware15 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC

yigexioabai/CVE-2022-26134-cve1

CVE-2022-26134CRITICALsob ataqueransomware15 out 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

GitHub PoC★ 1

在受影响的Confluence Server 和Data Center 版本中，存在一个OGNL 注入漏洞，该漏洞允许未经身份验证的攻击者在Confluence Server 或Data Center 服务器上执行任意代码。

CVE-2022-26134CRITICALsob ataqueransomware15 out 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

GitHub PoC

exploit for CVE-2022-40684 Fortinet

CVE-2022-40684CRITICALsob ataqueransomware15 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC

thecasual/CVE-2022-41358

CVE-2022-41358MEDIUM15 out 2022

A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary

33RISCO

abrir ↗

GitHub PoC★ 3

u think that it doesnt but it do

CVE-2022-37434CRITICAL15 out 2022

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header

53RISCO

abrir ↗

GitHub PoC

mhd108/CVE-2022-40684

CVE-2022-40684CRITICALsob ataqueransomware14 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC★ 1

ITPATJIDR/CVE-2022-41040

CVE-2022-41040HIGHsob ataqueransomware14 out 2022

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 1

iveresk/CVE-2022-40684

CVE-2022-40684CRITICALsob ataqueransomware14 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC★ 8

Authenticated Remote Command Execution in Gitlab via GitHub import.

CVE-2022-2992CRITICAL14 out 2022

A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows

85RISCO

abrir ↗

GitHub PoC★ 37

This repository contains potential security patches for the Magento APSB22-48 and CVE-2022-35698 security vulnerability

CVE-2022-35698CRITICAL14 out 2022

Adobe Commerce Stored XSS Arbitrary code execution

53RISCO

abrir ↗

GitHub PoC★ 5

secunnix/CVE-2022-40684

CVE-2022-40684CRITICALsob ataqueransomware14 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC★ 1

automated script for exploiting CVE-2007-2447

CVE-2007-2447—14 out 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISCO

abrir ↗

GitHub PoC★ 385

CobaltStrike <= 4.7.1 RCE

CVE-2022-39197MEDIUMsob ataque14 out 2022

An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote att

75RISCO

abrir ↗

GitHub PoC★ 1

Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935)

CVE-2019-18935CRITICALsob ataqueransomware13 out 2022

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISCO

abrir ↗

GitHub PoC★ 16

Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

CVE-2022-40684CRITICALsob ataqueransomware13 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC★ 1

Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935)

CVE-2017-11317CRITICALsob ataque13 out 2022

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload

100RISCO

abrir ↗

GitHub PoC★ 3

CVE-2022-37298 Shinken Monitoring

CVE-2022-37298CRITICAL13 out 2022

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler

48RISCO

abrir ↗

GitHub PoC★ 16

Bash PoC for Fortinet Auth Bypass - CVE-2022-40684

CVE-2022-40684CRITICALsob ataqueransomware13 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC★ 357

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

CVE-2022-40684CRITICALsob ataqueransomware13 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC

Arbitrary code execution analysis based on Telerik-UI. This will be done so that the article can be read by others. The document provides an in-depth explanation of the various vectors involved with Telerik-UI for ASP.NET AJAX, as well as POST requests, the architecture of ASP.NET AJAX,

CVE-2017-11317CRITICALsob ataque13 out 2022

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload

100RISCO

abrir ↗

GitHub PoC★ 87

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

CVE-2022-40684CRITICALsob ataqueransomware13 out 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RISCO

abrir ↗

GitHub PoC★ 2

0x1nsomnia/CVE-2022-36067-vm2-POC-webapp

CVE-2022-36067CRITICAL12 out 2022

vm2 vulnerable to Sandbox Escape before v3.9.11

60RISCO

abrir ↗

GitHub PoC★ 1

MariliaMeira/CVE-2019-14287

CVE-2019-14287—12 out 2022

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISCO

abrir ↗

GitHub PoC

r00t4dm/Jenkins-CVE-2015-8103

CVE-2015-8103—12 out 2022

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RISCO

abrir ↗

GitHub PoC

r00t4dm/Jenkins-CVE-2016-9299

CVE-2016-9299—12 out 2022

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a

60RISCO

abrir ↗

GitHub PoC★ 1

6E6L6F/CVE-2022-35914

CVE-2022-35914CRITICALsob ataque12 out 2022

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.