Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.087exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.792VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

13.743 exploits

GitHub PoC

CVE-2022-1388, bypassing iControl REST authentication

CVE-2022-1388CRITICALsob ataqueransomware04 jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 30

POC exploit for CVE-2015-10141

CVE-2015-10141CRITICAL04 jul 2022

Xdebug Remote Debugger Unauthenticated OS Command Execution

63RISCO

abrir ↗

GitHub PoC

CVE-2022-24706 POC exploit

CVE-2022-24706CRITICALsob ataque04 jul 2022

Remote Code Execution Vulnerability in Packaging

100RISCO

abrir ↗

GitHub PoC

The above investigation of the ES file browser security weakness allows us to see the issue in its entirety

CVE-2019-6447—03 jul 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISCO

abrir ↗

GitHub PoC★ 13

CVE-2022-2185 poc

CVE-2022-2185CRITICAL02 jul 2022

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

85RISCO

abrir ↗

GitHub PoC★ 5

Ruby反序列化命令执行漏洞（CVE-2019-5420）-vulfocus通关版

CVE-2019-5420—02 jul 2022

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RISCO

abrir ↗

GitHub PoC★ 1

PoC for exploiting CVE-2022-1388 on BIG IP F5

CVE-2022-1388CRITICALsob ataqueransomware01 jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 4

Apache Tomcat DoS (CVE-2022-29885) Exploit

CVE-2022-29885—01 jul 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RISCO

abrir ↗

GitHub PoC

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

CVE-2022-0847HIGHsob ataque30 jun 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

abrir ↗

GitHub PoC★ 134

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

CVE-2021-23017—30 jun 2022

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t

35RISCO

abrir ↗

GitHub PoC★ 5

Apache Tomcat CVE-2022-29885

CVE-2022-29885—30 jun 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RISCO

abrir ↗

GitHub PoC★ 1

vesperp/CVE-2021-42237-SiteCore-XP

CVE-2021-42237CRITICALsob ataqueransomware30 jun 2022

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it

100RISCO

abrir ↗

GitHub PoC★ 41

CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-34473CRITICALsob ataqueransomware29 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 8

This is exploit of CVE-2022-30190 on PowerPoint.

CVE-2022-30190HIGHsob ataqueransomware29 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

PoC for exploiting CVE-2022-26134 on Confluence

CVE-2022-26134CRITICALsob ataqueransomware29 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

GitHub PoC★ 5

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

CVE-2015-2291HIGHsob ataqueransomware28 jun 2022

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all

71RISCO

abrir ↗

GitHub PoC★ 1

Mass Exploit for CVE 2022-29464 on Carbon

CVE-2022-29464CRITICALsob ataqueransomware28 jun 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISCO

abrir ↗

GitHub PoC

A docker container vulnerable to Shellshock - CVE-2014-6271

CVE-2014-6271CRITICALsob ataque27 jun 2022

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

GitHub PoC★ 2

Follina (CVE-2022-30190) proof-of-concept

CVE-2022-30190HIGHsob ataqueransomware27 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 9

ProxyLogon (CVE-2021-26855+CVE-2021-27065) Exchange Server RCE (SSRF->GetWebShell)

CVE-2021-26855CRITICALsob ataqueransomware27 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

CVE-2021-26855

CVE-2021-26855CRITICALsob ataqueransomware27 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 16

Nacos下Spring-Cloud-Gateway CVE-2022-22947利用环境

CVE-2022-22947CRITICALsob ataque25 jun 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISCO

abrir ↗

GitHub PoC★ 85

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

CVE-2021-21551HIGHsob ataque25 jun 2022

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

98RISCO

abrir ↗

GitHub PoC

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)

CVE-2021-3156HIGHsob ataque24 jun 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

abrir ↗

GitHub PoC

CVE-2021-26855

CVE-2021-26855CRITICALsob ataqueransomware24 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

Cisco ASA XSS CVE-2020-3580

CVE-2020-3580MEDIUMsob ataqueransomware24 jun 2022

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

100RISCO

abrir ↗

GitHub PoC★ 2

Atlassian Confluence OGNL Injection Remote Code Execution (RCE) Vulnerability (CVE-2022-26134)

CVE-2022-26134CRITICALsob ataqueransomware24 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

GitHub PoC★ 1

cyb3rpeace/CVE-2021-34527

CVE-2021-34527HIGHsob ataqueransomware24 jun 2022

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 1

[Python/Shell] - Tested in HackTheBox - Shocker (Easy) CVE-2014-6271

CVE-2014-6271CRITICALsob ataque23 jun 2022

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

GitHub PoC★ 4

[PoC] Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE)

CVE-2022-26134CRITICALsob ataqueransomware21 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.