Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados
35.760CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentespopularesrisco
77.724 exploits
GitHub PoC★ 4
Zyxel 防火墙未经身份验证的远程命令注入
CVE-2022-30525CRITICALsob ataque13 mai 2022
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISCO
abrir ↗
GitHub PoC★ 2
Melissa
CVE-2020-0618CRITICALsob ataqueransomware13 mai 2022
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page
100RISCO
abrir ↗
GitHub PoC
testaross4/CVE-2007-2447
CVE-2007-2447—13 mai 2022
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-30525CRITICALsob ataque13 mai 2022
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALsob ataqueransomware13 mai 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC★ 22
Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）
CVE-2022-30525CRITICALsob ataque13 mai 2022
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISCO
abrir ↗
GitHub PoC★ 33
Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）批量检测脚本
CVE-2022-30525CRITICALsob ataque13 mai 2022
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHsob ataqueransomware12 mai 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-0688HIGHsob ataqueransomware12 mai 2022
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RISCO
abrir ↗
GitHub PoC
CVE-2021-41773 Shodan scanner
CVE-2021-41773HIGHsob ataqueransomware12 mai 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
Exploit-DB
Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated)
CVE-2022-28080—webappsphp12 mai 2022
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.
50RISCO
abrir ↗
GitHub PoC★ 2
Essay (and PoCs) about CVE-2021-41773, a remote code execution vulnerability in Apache 2.4.49 🕸️
CVE-2021-41773HIGHsob ataqueransomware12 mai 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 6
Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services
CVE-2022-26923HIGHsob ataque12 mai 2022
Active Directory Domain Services Elevation of Privilege Vulnerability
100RISCO
abrir ↗
Exploit-DB
F5 BIG-IP 16.0.x - Remote Code Execution (RCE)
CVE-2022-1388CRITICALsob ataqueransomwareremotemultiple12 mai 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
Exploit-DB
College Management System 1.0 - 'course_code' SQL Injection (Authenticated)
CVE-2022-28079—webappsphp12 mai 2022
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
43RISCO
abrir ↗
GitHub PoC★ 13
F5 BIG-IP iControl REST vulnerability RCE exploit with Java including a testing LAB
CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC★ 2
Nuclei Template for CVE-2022-1388
CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
GitHub PoC
CVE-2020-0688_Microsoft Exchange default MachineKeySection deserialize vulnerability
CVE-2020-0688HIGHsob ataqueransomware12 mai 2022
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RISCO
abrir ↗
Exploit-DB
TLR-2005KSH - Arbitrary File Delete
CVE-2021-46424—webappshardware12 mai 2022
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to de
50RISCO
abrir ↗
Exploit-DB
WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF)
CVE-2021-24581—webappsphp11 mai 2022
Blue Admin <= 21.06.01 - CSRF to Stored Cross-Site Scripting (XSS)
23RISCO
abrir ↗
Exploit-DB
Ruijie Reyee Mesh Router - Remote Code Execution (RCE) (Authenticated)
CVE-2021-43164—remotehardware11 mai 2022
A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.191
35RISCO
abrir ↗
GitHub PoC★ 1
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.
CVE-2013-4710—11 mai 2022
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)
CVE-2021-44595—localwindows11 mai 2022
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send m
28RISCO
abrir ↗
Exploit-DB
DLINK DIR850 - Insecure Access Control
CVE-2021-46378—remotehardware11 mai 2022
DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote
35RISCO
abrir ↗
GitHub PoC★ 7
A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.
CVE-2022-26937CRITICAL11 mai 2022
Windows Network File System Remote Code Execution Vulnerability
70RISCO
abrir ↗
GitHub PoC★ 2
CVE-2022-1388 Scanner
CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir ↗
Exploit-DB
WebTareas 2.4 - Blind SQLi (Authenticated)
CVE-2021-43481—webappsphp11 mai 2022
An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstag
23RISCO
abrir ↗
Exploit-DB
Anuko Time Tracker - SQLi (Authenticated)
CVE-2022-24707HIGHwebappsphp11 mai 2022
SQL injection in anuko timetracker
41RISCO
abrir ↗
← anteriorpágina 579 / 2.591próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.