Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

13.812 exploits

GitHub PoC★ 14

This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed "SpringShell".

CVE-2022-22963CRITICALsob ataque31 mar 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

GitHub PoC★ 15

CVE-2022-22963 Spring-Cloud-Function-SpEL_RCE_exploit

CVE-2022-22963CRITICALsob ataque30 mar 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

GitHub PoC★ 131

Spring4Shell - Spring Core RCE - CVE-2022-22965

CVE-2022-22965CRITICALsob ataque30 mar 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

GitHub PoC★ 50

CVE-2022-22965 : about spring core rce

CVE-2022-22965CRITICALsob ataque30 mar 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

GitHub PoC★ 377

Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

CVE-2022-22965CRITICALsob ataque30 mar 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

GitHub PoC★ 3

{ Spring Core 0day CVE-2022-22963 }

CVE-2022-22963CRITICALsob ataque30 mar 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

GitHub PoC★ 9

Kirill89/CVE-2022-22963-PoC

CVE-2022-22963CRITICALsob ataque30 mar 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

GitHub PoC

Spring Cloud Gateway Actuator API SpEL Code Injection.

CVE-2022-22947CRITICALsob ataque30 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISCO

GitHub PoC★ 115

CVE-2022-22963 PoC

CVE-2022-22963CRITICALsob ataque30 mar 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

GitHub PoC★ 34

darryk10/CVE-2022-22963

CVE-2022-22963CRITICALsob ataque30 mar 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

GitHub PoC

CVE-2022-28080

CVE-2022-28080—30 mar 2022

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.

50RISCO

GitHub PoC

scopion/CVE-2022-22947-exp

CVE-2022-22947CRITICALsob ataque30 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISCO

GitHub PoC★ 3

A TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled.

CVE-2009-3555CRITICAL30 mar 2022

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS

70RISCO

GitHub PoC

CVE-2022-28079

CVE-2022-28079—30 mar 2022

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.

43RISCO

GitHub PoC★ 4

Spring Cloud Gateway RCE - CVE-2022-22947

CVE-2022-22947CRITICALsob ataque30 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISCO

GitHub PoC★ 2

Vancomycin-g/CVE-2022-22947

CVE-2022-22947CRITICALsob ataque29 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISCO

GitHub PoC★ 2

Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096

CVE-2022-1096HIGHsob ataque29 mar 2022

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corrup

76RISCO

GitHub PoC★ 21

CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution

CVE-2019-9193—29 mar 2022

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RISCO

GitHub PoC

Set of scripts, to test and exploit the zerologon vulnerability (CVE-2020-1472).

CVE-2020-1472MEDIUMsob ataqueransomware29 mar 2022

Netlogon Elevation of Privilege Vulnerability

100RISCO

GitHub PoC★ 11

misterxid/watchguard_cve-2022-26318

CVE-2022-26318CRITICALsob ataque28 mar 2022

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulner

100RISCO

GitHub PoC

Tankirat/CVE-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware28 mar 2022

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC

Description of Exploit SMBGhost CVE-2020-0796

CVE-2020-0796CRITICALsob ataqueransomware28 mar 2022

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISCO

GitHub PoC

chattopadhyaykittu/CVE-2017-0037

CVE-2017-0037HIGHsob ataque28 mar 2022

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilde

93RISCO

GitHub PoC★ 354

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

CVE-2022-22963CRITICALsob ataque26 mar 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RISCO

GitHub PoC

tzwlhack/CVE-2018-20250

CVE-2018-20250HIGHsob ataqueransomware25 mar 2022

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISCO

GitHub PoC★ 2

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

CVE-2019-2215HIGHsob ataque25 mar 2022

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISCO

GitHub PoC★ 1

poc for CVE-2022-22947

CVE-2022-22947CRITICALsob ataque25 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RISCO

GitHub PoC

spasm5/CVE-2018-12326

CVE-2018-12326—25 mar 2022

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution

23RISCO

GitHub PoC★ 1

This is a exploit code for CVE-2020-8163

CVE-2020-8163—24 mar 2022

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the

60RISCO

GitHub PoC

A quick python exploit for the Nostromo 1.9.6 remote code execution vulnerability. Only takes in host and port of web server as required arguments.

CVE-2019-16278CRITICALsob ataque24 mar 2022

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.