Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados
35.788CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentespopularesrisco
77.813 exploits
VulnCheck XDB
initial-access
CVE-2020-11546—29 dez 2021
SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailing
50RISCO
abrir ↗
GitHub PoC
d4rk30/CVE-2017-12943
CVE-2017-12943—29 dez 2021
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?RE
35RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-15133HIGHsob ataque28 dez 2021
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware28 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 5
Auerswald COMpact 8.0B Backdoors exploit
CVE-2021-40859—28 dez 2021
Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web
60RISCO
abrir ↗
GitHub PoC★ 2
Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit
CVE-2021-40444HIGHsob ataqueransomware28 dez 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware28 dez 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
A spigot plugin to fix CVE-2021-44228 Log4j remote code execution vulnerability, to protect Minecraft clients.
CVE-2021-44228CRITICALsob ataqueransomware28 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 209
A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations Manager
CVE-2021-44228CRITICALsob ataqueransomware28 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 11
CVE-2019-9053 Exploit for Python 3
CVE-2019-9053—28 dez 2021
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve
35RISCO
abrir ↗
GitHub PoC
"Lavel Exploit CVE-2018-15133 is a powerful exploit that allows attackers to gain unauthorized access to vulnerable systems. This exploit was originally developed as part of a Capture The Flag (CTF) challenge and has since been used by security researchers and ethical hackers to identify and address vulnerabilities in web applications.
CVE-2018-15133HIGHsob ataque28 dez 2021
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri
100RISCO
abrir ↗
GitHub PoC★ 4
log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
Ravid-CheckMarx/CVE-2021-44228-Apache-Log4j-Rce-main
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-11546—27 dez 2021
SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailing
50RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
IOCs for CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
Regra ModSec para proteção log4j2 - CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
Log4Shell (CVE-2021-44228) is a zero-day vulnerability in Log4j
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
Quick and dirty scanner, hitting common ports looking for Log4Shell (CVE-2021-44228) vulnerability
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
Log4Shell (Cve-2021-44228) Proof Of Concept
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware27 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 2
Detection script for CVE-2021-42278 and CVE-2021-42287
CVE-2021-42278HIGHsob ataqueransomware27 dez 2021
Active Directory Domain Services Elevation of Privilege Vulnerability
93RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-20837—26 dez 2021
Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movab
60RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-36260CRITICALsob ataque25 dez 2021
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
GitHub PoC★ 2
This is a basic ROP based exploit for CVE 2020-14871. CVE 2020-14871 is a vulnerability in Sun Solaris systems libpam library, and exploitable over ssh
CVE-2020-14871CRITICALsob ataque25 dez 2021
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14871CRITICALsob ataque25 dez 2021
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve
100RISCO
abrir ↗
GitHub PoC★ 100
Collection of materials relating to FORCEDENTRY
CVE-2021-30860HIGHsob ataque25 dez 2021
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali
93RISCO
abrir ↗
GitHub PoC
this repository contains a POC of CVE-2021-44228 (log4j2shell) as part of a security research
CVE-2021-44228CRITICALsob ataqueransomware25 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
CVE-2021-44228 检查工具
CVE-2021-44228CRITICALsob ataqueransomware24 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
general purpose workaround for the log4j CVE-2021-44228 vulnerability
CVE-2021-44228CRITICALsob ataqueransomware24 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
← anteriorpágina 618 / 2.594próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.