Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

81.064exploits catalogados

37.667CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 24.044GitHub PoC 15.521VulnCheck XDB 9.080Nuclei 4.432Metasploit 3.505✓ só verificadosrecentes populares risco

15.521 exploits

GitHub PoC★ 7

Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

CVE-2008-0166—15 mai 2022

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RISCO

abrir ↗

GitHub PoC★ 14

An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell

CVE-2022-1388CRITICALsob ataqueransomware15 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 11

A bots loader for CVE-2022-29464 with multithreading

CVE-2022-29464CRITICALsob ataqueransomware15 mai 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISCO

abrir ↗

GitHub PoC★ 1

Improved POC for CVE-2022-1388 that affects multiple F5 products.

CVE-2022-1388CRITICALsob ataqueransomware15 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 1

MyBB 1.8.29 - Remote Code Execution

CVE-2022-24734HIGH15 mai 2022

Remote code execution in mybb

78RISCO

abrir ↗

GitHub PoC★ 41

The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services (AD CS) server role installed.

CVE-2022-26923HIGHsob ataque14 mai 2022

Active Directory Domain Services Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC

Technical Analysis of the SMB vulnerability (CVE-2017-0143) & its impact on the vulnerable system

CVE-2017-0143HIGHsob ataqueransomware14 mai 2022

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

GitHub PoC★ 4

Zyxel 防火墙未经身份验证的远程命令注入

CVE-2022-30525CRITICALsob ataque13 mai 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISCO

abrir ↗

GitHub PoC

Log4Shell Proof-Of-Concept derived from https://github.com/kozmer/log4j-shell-poc

CVE-2021-44228CRITICALsob ataqueransomware13 mai 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC★ 13

Tool for CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware13 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC

testaross4/CVE-2007-2447

CVE-2007-2447—13 mai 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISCO

abrir ↗

GitHub PoC★ 2

Melissa

CVE-2020-0618CRITICALsob ataqueransomware13 mai 2022

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page

100RISCO

abrir ↗

GitHub PoC★ 33

Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）批量检测脚本

CVE-2022-30525CRITICALsob ataque13 mai 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISCO

abrir ↗

GitHub PoC★ 22

Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）

CVE-2022-30525CRITICALsob ataque13 mai 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RISCO

abrir ↗

GitHub PoC★ 6

Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services

CVE-2022-26923HIGHsob ataque12 mai 2022

Active Directory Domain Services Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 2

Essay (and PoCs) about CVE-2021-41773, a remote code execution vulnerability in Apache 2.4.49 🕸️

CVE-2021-41773HIGHsob ataqueransomware12 mai 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 13

F5 BIG-IP iControl REST vulnerability RCE exploit with Java including a testing LAB

CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 2

Nuclei Template for CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC

CVE-2021-41773 Shodan scanner

CVE-2021-41773HIGHsob ataqueransomware12 mai 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC

CVE-2020-0688_Microsoft Exchange default MachineKeySection deserialize vulnerability

CVE-2020-0688HIGHsob ataqueransomware12 mai 2022

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

abrir ↗

GitHub PoC

This repository consists of the python exploit for CVE-2022-1388 (F5's BIG-IP Authentication Bypass to RCE)

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 5

AmirHoseinTangsiriNET/CVE-2022-1388-Scanner

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC

Research and proof of concept related to CVE-2022-1388.

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388 Scanner

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC

ShaikUsaf/external_expact_AOSP10_r33_CVE-2022-25315

CVE-2022-25315CRITICAL11 mai 2022

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

48RISCO

abrir ↗

GitHub PoC★ 1

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.

CVE-2013-4710—11 mai 2022

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp

50RISCO

abrir ↗

GitHub PoC★ 7

A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.

CVE-2022-26937CRITICAL11 mai 2022

Windows Network File System Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 1

CVE-2012-6636—11 mai 2022

The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote atta

50RISCO

abrir ↗

GitHub PoC

CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 4

A Test API for testing the POC against CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware10 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.