Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

13.937 exploits

GitHub PoC

MovableType XMLRPC - RCE

CVE-2021-20837—01 nov 2021

Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movab

60RISCO

abrir ↗

GitHub PoC★ 3

CVE-2021-22205-getshell

CVE-2021-22205CRITICALsob ataqueransomware01 nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

GitHub PoC

Exploit and Demo system for CVE-2021-3156

CVE-2021-3156HIGHsob ataque01 nov 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

abrir ↗

GitHub PoC★ 13

CVE-2021-22205 RCE

CVE-2021-22205CRITICALsob ataqueransomware31 out 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

GitHub PoC★ 21

XMLRPC - RCE in MovableTypePoC

CVE-2021-20837—30 out 2021

Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movab

60RISCO

abrir ↗

GitHub PoC★ 2

kienquoc102/CVE-2017-8225

CVE-2017-8225—30 out 2021

On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An

28RISCO

abrir ↗

GitHub PoC

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…

CVE-2021-26855CRITICALsob ataqueransomware30 out 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 23

CVE-2021-22205 Gitlab 未授权远程代码执行漏洞 EXP, 移除了对djvumake & djvulibre的依赖，可在win平台使用

CVE-2021-22205CRITICALsob ataqueransomware30 out 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

GitHub PoC★ 2

PoC in single line bash

CVE-2021-22205CRITICALsob ataqueransomware30 out 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

GitHub PoC★ 7

Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP CVE-2021-22205

CVE-2021-22205CRITICALsob ataqueransomware29 out 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

GitHub PoC★ 285

CVE-2021-22205& GitLab CE/EE RCE

CVE-2021-22205CRITICALsob ataqueransomware29 out 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

GitHub PoC

Setup vulnerable enviornment

CVE-2021-41773HIGHsob ataqueransomware29 out 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

0xAgun/CVE-2019-18935-checker

CVE-2019-18935CRITICALsob ataqueransomware29 out 2021

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISCO

abrir ↗

GitHub PoC

scopion/CVE-2020-10963

CVE-2020-10963—29 out 2021

FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution)

28RISCO

abrir ↗

GitHub PoC

scopion/CVE-2018-8947

CVE-2018-8947—29 out 2021

rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easi

28RISCO

abrir ↗

GitHub PoC★ 2

BabyTeam1024/CVE-2021-40438

CVE-2021-40438CRITICALsob ataqueransomware28 out 2021

mod_proxy SSRF

100RISCO

abrir ↗

GitHub PoC★ 1

批量扫描CVE-2020-0796

CVE-2020-0796CRITICALsob ataqueransomware28 out 2021

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISCO

abrir ↗

GitHub PoC★ 9

An attempt to reproduce Microsoft MSHTML Remote Code Execution (RCE) Vulnerability and using Metasploit Framework.

CVE-2021-40444HIGHsob ataqueransomware28 out 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 69

CVE-2021-22205 Unauthorized RCE

CVE-2021-22205CRITICALsob ataqueransomware28 out 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

GitHub PoC★ 86

Pocsuite3 For CVE-2021-22205

CVE-2021-22205CRITICALsob ataqueransomware28 out 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

GitHub PoC★ 21

VMware vCenter Server任意文件上传漏洞 / Code By:Jun_sheng

CVE-2021-22005CRITICALsob ataqueransomware27 out 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISCO

abrir ↗

GitHub PoC★ 27

cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50

CVE-2021-42013CRITICALsob ataqueransomware27 out 2021

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

abrir ↗

GitHub PoC

b1tg/CVE-2021-34486-exp

CVE-2021-34486HIGHsob ataque27 out 2021

Windows Event Tracing Elevation of Privilege Vulnerability

71RISCO

abrir ↗

GitHub PoC★ 296

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

CVE-2021-36260CRITICALsob ataque27 out 2021

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RISCO

abrir ↗

GitHub PoC

rafaelcaria/drupalgeddon2-CVE-2018-7600

CVE-2018-7600CRITICALsob ataqueransomware27 out 2021

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC

RB4C/drupalgeddon2-CVE-2018-7600

CVE-2018-7600CRITICALsob ataqueransomware27 out 2021

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 11

Remote Code Execution exploit for Apache servers. Affected versions: Apache 2.4.49, Apache 2.4.50

CVE-2021-41773HIGHsob ataqueransomware26 out 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 7

CVE-2021-26084，Atlassian Confluence OGNL注入漏洞

CVE-2021-26084CRITICALsob ataqueransomware26 out 2021

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

GitHub PoC★ 18

PoC for the CVE-2021-20837 : RCE in MovableType

CVE-2021-20837—25 out 2021

Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movab

60RISCO

abrir ↗

GitHub PoC★ 45

LPE exploit for a UAF in Windows (CVE-2021-40449).

CVE-2021-40449HIGHsob ataqueransomware25 out 2021

Win32k Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.