Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

13.937 exploits

GitHub PoC★ 1

masahiro331/CVE-2021-41773

CVE-2021-41773HIGHsob ataqueransomware05 out 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 13

Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49.

CVE-2021-41773HIGHsob ataqueransomware05 out 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 6

Poc.py

CVE-2021-41773HIGHsob ataqueransomware05 out 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 1

bypass all stages of the password reset flow

CVE-2021-27651CRITICAL05 out 2021

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to byp

75RISCO

abrir ↗

GitHub PoC★ 25

Atlassian Jira Server/Data Center 8.4.0 - Arbitrary File read (CVE-2021-26086)

CVE-2021-26086MEDIUMsob ataque05 out 2021

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path tr

100RISCO

abrir ↗

GitHub PoC

POC: CVE-2019-12840 (Authenticated RCE - Webmin Package Updates)

CVE-2019-12840—05 out 2021

In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root pr

60RISCO

abrir ↗

GitHub PoC★ 39

lorddemon/CVE-2021-41773-PoC

CVE-2021-41773HIGHsob ataqueransomware05 out 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

Opensitoo/cve-2020-0796

CVE-2020-0796CRITICALsob ataqueransomware04 out 2021

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISCO

abrir ↗

GitHub PoC★ 11

CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)

CVE-2021-21972CRITICALsob ataqueransomware03 out 2021

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISCO

abrir ↗

GitHub PoC★ 9

H0j3n/CVE-2021-40444

CVE-2021-40444HIGHsob ataqueransomware03 out 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2018-15961 — ᴀᴅᴏʙᴇ ᴄᴏʟᴅғᴜsɪᴏɴ (ʀᴄᴇ)

CVE-2018-15961CRITICALsob ataque03 out 2021

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr

100RISCO

abrir ↗

GitHub PoC★ 2

Exploit code for CVE-2007-2447 written in Python3.

CVE-2007-2447—03 out 2021

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISCO

abrir ↗

GitHub PoC★ 7

Proof On Concept — Pulse Secure CVE-2021-22893

CVE-2021-22893CRITICALsob ataqueransomware03 out 2021

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windo

90RISCO

abrir ↗

GitHub PoC★ 1

puckiestyle/CVE-2021-3493

CVE-2021-3493HIGHsob ataque02 out 2021

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

abrir ↗

GitHub PoC★ 2

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)

CVE-2019-17662—02 out 2021

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RISCO

abrir ↗

GitHub PoC

wdjcy/CVE-2021-26084

CVE-2021-26084CRITICALsob ataqueransomware02 out 2021

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

GitHub PoC★ 16

POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)

CVE-2021-34523CRITICALsob ataqueransomware02 out 2021

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 22

the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

CVE-2021-22005CRITICALsob ataqueransomware02 out 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISCO

abrir ↗

GitHub PoC★ 1

daletoniris/CVE-2021-22555-esc-priv

CVE-2021-22555HIGHsob ataque01 out 2021

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

GitHub PoC

CloudMe CVE-2018-6892 POC

CVE-2018-6892—01 out 2021

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RISCO

abrir ↗

GitHub PoC★ 12

PoC for CVE-2021-3129 (Laravel)

CVE-2021-3129CRITICALsob ataqueransomware01 out 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

abrir ↗

GitHub PoC★ 1

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.

CVE-2019-17662—01 out 2021

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RISCO

abrir ↗

GitHub PoC★ 12

Simple Serv-U CVE-2021-35211 PoC

CVE-2021-35211CRITICALsob ataqueransomware30 set 2021

Serv-U Remote Memory Escape Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 28

Cisco RV110w UPnP stack overflow

CVE-2021-34730CRITICAL30 set 2021

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

53RISCO

abrir ↗

GitHub PoC

CVE-2021-25162

CVE-2021-25162—29 set 2021

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

28RISCO

abrir ↗

GitHub PoC★ 5

This docx exploit uses res files inside Microsoft .docx file to execute malicious files. This exploit is related to CVE-2021-40444

CVE-2021-40444HIGHsob ataqueransomware29 set 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

漏洞复现与poc收集，CVE-2021-21975，cve-2021-22005，CVE-2021-26295，VMware vCenter任意文件读取

CVE-2021-21975HIGHsob ataqueransomware29 set 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RISCO

abrir ↗

GitHub PoC

According to researchers with Rapid7, over 110,000 devices appear on internet, which run stable Samba versions, while 92,500 seem to run unstable Samba versions, for which there is no fix. The newest Samba models, including the models 4.6.x before 4.6.4, 4.5.x before 4.5.10 and 3.5.0 before 4.4.13, was impacted by this error. May 24, 2017, Samba released version 4.6.4, which fixes a serious remote code execution vulnerability, vulnerability number CVE-2017-7494, which affected Samba 3.5.0 onwards. Vulnerability number: CVE-2017-7494 Severity Rating: High Affected software: • Samba Version < 4.6.4 • Samba Version < 4.5.10 • Samba Version < 4.4.14 Unaffected software: • Samba Version = 4.6.4 • Samba Version = 4.5.10 • Samba Version = 4.4.14

CVE-2017-7494CRITICALsob ataqueransomware29 set 2021

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISCO

abrir ↗

GitHub PoC★ 14

CrackerCat/CVE-2021-30632

CVE-2021-30632HIGHsob ataque28 set 2021

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c

83RISCO

abrir ↗

GitHub PoC★ 37

rwincey/CVE-2021-22005

CVE-2021-22005CRITICALsob ataqueransomware28 set 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.