Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

81.064exploits catalogados
37.667CVEs com exploração pública
24.695testados em laboratório
15.521 exploits
GitHub PoC4
CVE-2022-26134 Confluence OGNL Injection POC
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC1
Atlassian Confluence- Unauthenticated OGNL injection vulnerability (RCE)
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC
vesperp/CVE-2022-26134-Confluence
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC236
Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)
CVE-2022-3007507 jun 2022
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote
35RISCO
abrir
GitHub PoC4
Atlassian Confluence 远程代码执行漏洞(CVE-2022-26134)
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC13
Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC
C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…
CVE-2021-26855CRITICALsob ataqueransomware07 jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC1
CVE-2020-0796 explanation and researching vulnerability for term porject CENG325
CVE-2020-0796CRITICALsob ataqueransomware07 jun 2022
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir
GitHub PoC4
Y000o/Confluence-CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC338
BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL
CVE-2022-26134CRITICALsob ataqueransomware07 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC1
This project files demostrate a proof-of-concept of log4j vulnerability (CVE-2021-44228) on AWS using Terraform Infrastructure-as-a-code means.
CVE-2021-44228CRITICALsob ataqueransomware07 jun 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC
Exploit in Rails Development Mode. With some knowledge of a target application it is possible for an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.
CVE-2019-542006 jun 2022
A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th
60RISCO
abrir
GitHub PoC20
Simple Honeypot for Atlassian Confluence (CVE-2022-26134)
CVE-2022-26134CRITICALsob ataqueransomware06 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC1
Microsoft MS-MSDT Follina (0-day Vulnerability) CVE-2022-30190 Attack Vector
CVE-2022-30190HIGHsob ataqueransomware06 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC44
Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)
CVE-2022-26134CRITICALsob ataqueransomware06 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC4
This repository talks about Zero-Day Exploitation of Atlassian Confluence, it's defense and analysis point of view from a SecOps or Blue Team perspective
CVE-2022-26134CRITICALsob ataqueransomware06 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC8
abhishekmorla/CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware05 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC1
0xAgun/CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware05 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC
tej7gandhi/CVE-2022-30190-Zero-Click-Zero-Day-in-msdt
CVE-2022-30190HIGHsob ataqueransomware05 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC3
Vulnmachines/Confluence-CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware05 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC6
ItsNee/Follina-CVE-2022-30190-POC
CVE-2022-30190HIGHsob ataqueransomware05 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC1
Atlassian confluence poc
CVE-2022-26134CRITICALsob ataqueransomware05 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC2
(CVE-2022-26134)an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server
CVE-2022-26134CRITICALsob ataqueransomware04 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC37
CVE-2022-0847 used to achieve container escape 利用CVE-2022-0847 (Dirty Pipe) 实现容器逃逸
CVE-2022-0847HIGHsob ataque04 jun 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir
GitHub PoC5
Remote Access Shell for Windows (based on cve-2022-30190)
CVE-2022-30190HIGHsob ataqueransomware04 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC3
CVE-2022-26133 Exploit
CVE-2022-26133CRITICAL04 jun 2022
SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and l
70RISCO
abrir
GitHub PoC6
This project demonstrates a proof-of-concept exploit for CVE-2022-30190, also known as "Follina"—a critical remote code execution vulnerability affecting Microsoft Office via the MSDT protocol. The application generates malicious Office documents to illustrate the exploit workflow for educational and research purposes only.
CVE-2022-30190HIGHsob ataqueransomware04 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
GitHub PoC1
Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability PoC
CVE-2022-26134CRITICALsob ataqueransomware04 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC3
kyxiaxiang/CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware04 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
GitHub PoC1
Dump SQL database version on host running Casdoor < 1.13.1
CVE-2022-2412404 jun 2022
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as d
50RISCO
abrir
anteriorpágina 360 / 518próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.