Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.813exploits catalogados

35.788CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientes populares riesgo

77.813 exploits

GitHub PoC★ 57

Ansible detector scanner playbook to verify target Linux hosts using the official Red Hat Log4j detector script RHSB-2021-009 Remote Code Execution - log4j (CVE-2021-44228)

CVE-2021-44228CRITICALbajo ataqueransomware21 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

相关的复现和文档

CVE-2021-44228CRITICALbajo ataqueransomware21 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 1

POC for CVE-2021-44228 within Springboot

CVE-2021-44228CRITICALbajo ataqueransomware21 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

Webmin Local File Include (unauthenticated)

CVE-2006-3392—21 dic 2021

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RIESGO

GitHub PoC

halencarjunior/grafana-CVE-2021-43798

CVE-2021-43798HIGHbajo ataque21 dic 2021

Grafana path traversal

100RIESGO

GitHub PoC

Log4j2 CVE-2021-44228 hack demo for a springboot app

CVE-2021-44228CRITICALbajo ataqueransomware21 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

Python script to detect Log4Shell Vulnerability CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware21 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 7

Decrypt FortiGate configuration secrets

CVE-2019-6693MEDIUMbajo ataqueransomware21 dic 2021

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RIESGO

GitHub PoC★ 33

Scan and patch tool for CVE-2021-44228 and related log4j concerns.

CVE-2021-44228CRITICALbajo ataqueransomware21 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

VulnCheck XDB

infoleak

CVE-2019-6693MEDIUMbajo ataqueransomware21 dic 2021

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RIESGO

GitHub PoC★ 1

Bash que instala los sploit CVE-2017-0781 y CVE-2017-0785 y lo necesario para su usos.

CVE-2017-0781—20 dic 2021

A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1

28RIESGO

GitHub PoC★ 85

Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)

CVE-2021-45046CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

Exploit-DB

WBCE CMS 1.5.1 - Admin Password Reset

CVE-2021-3817CRITICALwebappsphp20 dic 2021

SQL Injection in wbce/wbce_cms

60RIESGO

VulnCheck XDB

initial-access

CVE-2019-0708CRITICALbajo ataqueransomware20 dic 2021

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

GitHub PoC

offensity/CVE-2019-0708

CVE-2019-0708CRITICALbajo ataqueransomware20 dic 2021

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

GitHub PoC★ 38

log4j2 RCE漏洞（CVE-2021-44228)内网扫描器，可用于在不出网的条件下进行漏洞扫描，帮助企业内部快速发现Log4jShell漏洞。

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 2

Script en bash que permite identificar la vulnerabilidad Log4j CVE-2021-44228 de forma remota.

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 5

Vulnerable web application to test CVE-2021-44228 / log4shell and forensic artifacts from an example attack

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 2

Windows Batch Scrip to Fix the log4j-issue-CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

intel-xeon/CVE-2021-44228---detection-with-PowerShell

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

VulnCheck XDB

local

CVE-2021-3156HIGHbajo ataque20 dic 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

GitHub PoC

a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 2

log4j2 Log4Shell CVE-2021-44228 proof of concept

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

VulnCheck XDB

local

CVE-2018-3639MEDIUM20 dic 2021

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres

45RIESGO

GitHub PoC

bumheehan/cve-2021-44228-log4j-test

CVE-2021-44228CRITICALbajo ataqueransomware20 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

VulnCheck XDB

initial-access

CVE-2020-5902CRITICALbajo ataqueransomware19 dic 2021

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 5

Identifying all log4j components across on local windows servers. CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware19 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 1

An Inspec profile to check for Log4j CVE-2021-44228 and CVE-2021-45046

CVE-2021-44228CRITICALbajo ataqueransomware19 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

kkyehit/log4j_CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware19 dic 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.