Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados
35.647CVEs com exploração pública
24.695testados em laboratório
77.620 exploits
GitHub PoC
Exploit modificado para el tito Eu
CVE-2021-4034HIGHsob ataqueransomware08 jun 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir
GitHub PoC3
批量检测Spring Cloud Gateway 远程代码执行漏洞 Spring_Cloud_Gateway_RCE_POC-CVE-2022-22947
CVE-2022-22947CRITICALsob ataque08 jun 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISCO
abrir
GitHub PoC
secjia/CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware08 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware08 jun 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir
GitHub PoC12
Atlassian confluence unauthenticated ONGL injection remote code execution scanner (CVE-2022-26134).
CVE-2022-26134CRITICALsob ataqueransomware08 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC3
Exploit vulnerabilities and vulnerability prevention implementation
CVE-2017-8464HIGHsob ataque08 jun 2022
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALsob ataque08 jun 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2022-30190HIGHsob ataqueransomware08 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC2
CVE-2021-41773 | Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks
CVE-2021-41773HIGHsob ataqueransomware07 jun 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC1
CVE-2020-0796 explanation and researching vulnerability for term porject CENG325
CVE-2020-0796CRITICALsob ataqueransomware07 jun 2022
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2022-3007507 jun 2022
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote
35RISCO
abrir
GitHub PoC1
This project files demostrate a proof-of-concept of log4j vulnerability (CVE-2021-44228) on AWS using Terraform Infrastructure-as-a-code means.
CVE-2021-44228CRITICALsob ataqueransomware07 jun 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC1
Microsoft Support Diagnostic Tool (CVE-2022-30190)
CVE-2022-30190HIGHsob ataqueransomware07 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC4
Server to host/activate Follina payloads & generator of malicious Word documents exploiting the MS-MSDT protocol. (CVE-2022-30190)
CVE-2022-30190HIGHsob ataqueransomware07 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC
Notes related to CVE-2022-30190
CVE-2022-30190HIGHsob ataqueransomware07 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC234
Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)
CVE-2022-3007507 jun 2022
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote
35RISCO
abrir
GitHub PoC1
Atlassian Confluence- Unauthenticated OGNL injection vulnerability (RCE)
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC340
BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC4
Y000o/Confluence-CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC1
Implementation of CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC
C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…
CVE-2021-26855CRITICALsob ataqueransomware07 jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC4
Atlassian Confluence 远程代码执行漏洞(CVE-2022-26134)
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-41773HIGHsob ataqueransomware07 jun 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir
GitHub PoC13
Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC4
CVE-2022-26134 Confluence OGNL Injection POC
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC
vesperp/CVE-2022-26134-Confluence
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC44
Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)
CVE-2022-26134CRITICALsob ataqueransomware06 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC4
This repository talks about Zero-Day Exploitation of Atlassian Confluence, it's defense and analysis point of view from a SecOps or Blue Team perspective
CVE-2022-26134CRITICALsob ataqueransomware06 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
anteriorpágina 570 / 2.588próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.