Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.542exploits catalogados

34.971CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.947VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.468✓ só verificadosrecentes populares risco

13.947 exploits

GitHub PoC

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability).

CVE-2019-20361HIGH18 mar 2021

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to b

78RISCO

GitHub PoC★ 51

This is a Poc for BIGIP iControl unauth RCE

CVE-2021-22986CRITICALsob ataqueransomware17 mar 2021

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RISCO

GitHub PoC

Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE (Authenticated)

CVE-2019-11447—17 mar 2021

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RISCO

GitHub PoC★ 124

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

CVE-2021-26855CRITICALsob ataqueransomware17 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 4

CVE-2021-26855 proxyLogon metasploit exploit script

CVE-2021-26855CRITICALsob ataqueransomware17 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 33

ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.

CVE-2021-26855CRITICALsob ataqueransomware16 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

automate me!

CVE-2021-21973MEDIUMsob ataque16 mar 2021

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of UR

100RISCO

GitHub PoC★ 3

Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange

CVE-2021-26855CRITICALsob ataqueransomware16 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 28

CVE-2021-26855 & CVE-2021-27065

CVE-2021-26855CRITICALsob ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 6

Mr-xn/CVE-2021-26855-d

CVE-2021-26855CRITICALsob ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 803

Sudo Baron Samedit Exploit

CVE-2021-3156HIGHsob ataque15 mar 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

GitHub PoC★ 4

patched to work

CVE-2021-26855CRITICALsob ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

Exploit Samba

CVE-2007-2447—14 mar 2021

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISCO

GitHub PoC★ 9

RCE exploit for ProxyLogon vulnerability in Microsoft Exchange

CVE-2021-26855CRITICALsob ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 30

CVE-2021-26855: PoC (Not a HoneyPoC for once!)

CVE-2021-26855CRITICALsob ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 22

RCE exploit for Microsoft Exchange Server (CVE-2021-26855).

CVE-2021-26855CRITICALsob ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 3

Scanner and PoC for CVE-2021-26855

CVE-2021-26855CRITICALsob ataqueransomware12 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC

vonderchild/CVE-2016-3088

CVE-2016-3088CRITICALsob ataque12 mar 2021

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISCO

GitHub PoC

Will write a python script for exploiting this vulnerability

CVE-2020-25213CRITICALsob ataque12 mar 2021

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra

100RISCO

GitHub PoC★ 1.077

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

CVE-2020-14883HIGHsob ataque11 mar 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

GitHub PoC★ 5

Apache ActiveMQ Remote Code Execution Exploit

CVE-2016-3088CRITICALsob ataque11 mar 2021

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISCO

GitHub PoC★ 5

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 111

proxylogon exploit - CVE-2021-26857

CVE-2021-26857HIGHsob ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

93RISCO

GitHub PoC★ 12

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.

CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 61

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 53

alt3kx/CVE-2021-26855_PoC

CVE-2021-26855CRITICALsob ataqueransomware10 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC

This script test the CVE-2021-26855 vulnerability on Exchange Server.

CVE-2021-26855CRITICALsob ataqueransomware09 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

CVE-2021-26855CRITICALsob ataqueransomware09 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 17

PoC exploit code for CVE-2021-26855

CVE-2021-26855CRITICALsob ataqueransomware09 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 100

h4x0r-dz/CVE-2021-26855

CVE-2021-26855CRITICALsob ataqueransomware09 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.