Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.893exploits catalogados

35.838CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

77.866 exploits

GitHub PoC★ 1

a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit.

CVE-2014-6287CRITICALsob ataque03 dez 2021

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RISCO

GitHub PoC

MaximeSchlegel/CVE-2021-32724-Target

CVE-2021-32724CRITICAL03 dez 2021

check-spelling workflow vulnerable to GITHUB_TOKEN leakage via symlink attack

48RISCO

VulnCheck XDB

initial-access

CVE-2021-22205CRITICALsob ataqueransomware03 dez 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

VulnCheck XDB

infoleak

CVE-2021-21402HIGH02 dez 2021

Unauthenticated Arbitrary File Access in Jellyfin

78RISCO

GitHub PoC

dearpan/cve-2018-9995

CVE-2018-9995—02 dez 2021

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

GitHub PoC★ 1

CVE-2021-42325 POC

CVE-2021-42325—02 dez 2021

Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.

28RISCO

VulnCheck XDB

local

CVE-2021-41379MEDIUMsob ataqueransomware02 dez 2021

Windows Installer Elevation of Privilege Vulnerability

68RISCO

GitHub PoC

A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287

CVE-2014-6287CRITICALsob ataque02 dez 2021

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RISCO

VulnCheck XDB

initial-access

CVE-2019-12725—02 dez 2021

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RISCO

Metasploit300

Grafana Plugin Path Traversal

CVE-2021-43798HIGHsob ataque02 dez 2021

Grafana path traversal

100RISCO

Metasploit600

Ivanti Cloud Services Appliance (CSA) Command Injection

CVE-2021-44529CRITICALsob ataqueransomware02 dez 2021

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execut

100RISCO

VulnCheck XDB

infoleak

CVE-2020-17519CRITICALsob ataque02 dez 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RISCO

VulnCheck XDB

remote-with-credentials

CVE-2018-9995—02 dez 2021

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

VulnCheck XDB

initial-access

CVE-2014-6287CRITICALsob ataque02 dez 2021

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RISCO

VulnCheck XDB

initial-access

CVE-2021-25646—02 dez 2021

Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.

60RISCO

VulnCheck XDB

remote-with-credentials

CVE-2021-1675HIGHsob ataqueransomware01 dez 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RISCO

Exploit-DB

Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting

CVE-2021-40577—webappsphp01 dez 2021

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP an

23RISCO

VulnCheck XDB

local

CVE-2021-30807HIGHsob ataque30 nov 2021

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS

76RISCO

VulnCheck XDB

infoleak

CVE-2021-43778CRITICAL30 nov 2021

Path traversal in GLPI barcode plugin

75RISCO

GitHub PoC★ 3

CVE-2021-43778 poc

CVE-2021-43778CRITICAL30 nov 2021

Path traversal in GLPI barcode plugin

75RISCO

GitHub PoC★ 5

Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s)

CVE-2021-30807HIGHsob ataque30 nov 2021

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS

76RISCO

GitHub PoC★ 1

Sigma-Rule-for-CVE-2021-40438-Attack-Attemp

CVE-2021-40438CRITICALsob ataqueransomware30 nov 2021

mod_proxy SSRF

100RISCO

VulnCheck XDB

initial-access

CVE-2021-41653—29 nov 2021

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to r

60RISCO

VulnCheck XDB

initial-access

CVE-2020-11978HIGHsob ataque28 nov 2021

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was disco

100RISCO

GitHub PoC

Strapi Framework, 3.0.0-beta.17.4

CVE-2019-19609—27 nov 2021

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c

35RISCO

VulnCheck XDB

remote-with-credentials

CVE-2021-42321HIGHsob ataqueransomware27 nov 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

remote-with-credentials

CVE-2019-19609—27 nov 2021

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c

35RISCO

VulnCheck XDB

infoleak

CVE-2021-22205CRITICALsob ataqueransomware27 nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

GitHub PoC★ 1

NSE script to fingerprint if GitLab is vulnerable to cve-2021-22205-nse

CVE-2021-22205CRITICALsob ataqueransomware27 nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

GitHub PoC

Detect with python and tracking IP

CVE-2018-7600CRITICALsob ataqueransomware26 nov 2021

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.