Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

14.080 exploits

GitHub PoC★ 2

sap netweaver portal add user administrator

CVE-2020-6287CRITICALsob ataque22 jul 2020

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RISCO

abrir ↗

GitHub PoC

A powershell script to deploy the registry mitigation key for CVE-2020-1350

CVE-2020-1350CRITICALsob ataque22 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 28

Onapsis/CVE-2020-6287_RECON-scanner

CVE-2020-6287CRITICALsob ataque21 jul 2020

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RISCO

abrir ↗

GitHub PoC★ 96

PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR module: https://github.com/rapid7/metasploit-framework/pull/13852/commits/d1e2c75b3eafa7f62a6aba9fbe6220c8da97baa8 This PoC only create user with unauthentication permission and no more administrator permission set. This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials of this project. Original finding: CVE-2020-6287: Pablo Artuso CVE-2020-6286: Yvan 'iggy' G. Usage: python sap-CVE-2020-6287-add-user.py <HTTP(s)://IP:Port

CVE-2020-6287CRITICALsob ataque20 jul 2020

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RISCO

abrir ↗

GitHub PoC★ 80

Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()

CVE-2020-14645CRITICAL20 jul 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

60RISCO

abrir ↗

GitHub PoC★ 1

Ported Exploit From Python To Golang

CVE-2018-6892—20 jul 2020

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RISCO

abrir ↗

GitHub PoC★ 3

DaBoQuan/CVE-2020-14645

CVE-2020-14645CRITICAL20 jul 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

60RISCO

abrir ↗

GitHub PoC★ 17

f5devcentral/cve-2020-5902-ioc-bigip-checker

CVE-2020-5902CRITICALsob ataqueransomware20 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISCO

abrir ↗

GitHub PoC

DNS Vulnerability - CVE-2020-1350

CVE-2020-1350CRITICALsob ataque19 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 4

Iamgublin/CVE-2020-1054

CVE-2020-1054HIGHsob ataque19 jul 2020

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o

98RISCO

abrir ↗

GitHub PoC★ 2

Scanner and Mitigator for CVE 2020-1350

CVE-2020-1350CRITICALsob ataque18 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 4

Enviroment and exploit to rce test

CVE-2020-8163—18 jul 2020

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the

60RISCO

abrir ↗

GitHub PoC

Disables AJP connectors to remediate CVE-2020-1938!

CVE-2020-1938CRITICALsob ataque17 jul 2020

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RISCO

abrir ↗

GitHub PoC★ 10

Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware17 jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 11

CVE-2020-1350 Proof-of-Concept

CVE-2020-1350CRITICALsob ataque17 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 8

GUI

CVE-2020-5902CRITICALsob ataqueransomware17 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISCO

abrir ↗

GitHub PoC

Bludit Exploitation Via upload Image.php

CVE-2019-16113—17 jul 2020

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

60RISCO

abrir ↗

GitHub PoC★ 18

Denial of Service PoC for CVE-2020-1350 (SIGRed)

CVE-2020-1350CRITICALsob ataque16 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 1

Environment for CVE_2019_17571

CVE-2019-17571CRITICAL16 jul 2020

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be explo

60RISCO

abrir ↗

GitHub PoC★ 225

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

CVE-2020-6287CRITICALsob ataque15 jul 2020

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RISCO

abrir ↗

GitHub PoC★ 2

ctlyz123/CVE-2020-8193

CVE-2020-8193MEDIUMsob ataque15 jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISCO

abrir ↗

GitHub PoC★ 237

A denial-of-service proof-of-concept for CVE-2020-1350

CVE-2020-1350CRITICALsob ataque15 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC

Windows registry mitigation response to CVE-2020-1350

CVE-2020-1350CRITICALsob ataque15 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 9

Detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 (AKA SIGRed)

CVE-2020-1350CRITICALsob ataque15 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 15

This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service

CVE-2020-1350CRITICALsob ataque15 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 279

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

CVE-2020-1350CRITICALsob ataque14 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 7

Fake exploit tool, designed to rickroll users attempting to actually exploit.

CVE-2020-1350CRITICALsob ataque14 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 4

mr-r3b00t/CVE-2020-1350

CVE-2020-1350CRITICALsob ataque14 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RISCO

abrir ↗

GitHub PoC★ 8

Scanning for CVE-2020-8193 - Auth Bypass check

CVE-2020-8193MEDIUMsob ataque13 jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISCO

abrir ↗

GitHub PoC★ 3

TeamViewer Store Credentials Decryption

CVE-2019-18988HIGHsob ataque13 jul 2020

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

86RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.