Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

14.131 exploits

GitHub PoC★ 2

The DGS-1510 Websmart switch series firmware has been found to have security vulneratiblies. The vulnerabilities include unauthenticated command bypass and unauthenticated information disclosure.

CVE-2017-6206—20 mar 2017

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devi

28RISCO

GitHub PoC★ 1

boompig/cve-2016-6662

CVE-2016-6662—19 mar 2017

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2

35RISCO

GitHub PoC★ 4

CVE-2016-5195 dirtycow by timwr automated multi file patch tool

CVE-2016-5195HIGHsob ataque18 mar 2017

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

GitHub PoC★ 3

Apache Struts (CVE-2017-5638) Shell

CVE-2017-5638CRITICALsob ataqueransomware17 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 2

Struts2 RCE CVE-2017-5638 non-intrusive check shell script

CVE-2017-5638CRITICALsob ataqueransomware16 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 1

CVE-2014-0050 Vulnerable site sample

CVE-2014-0050—15 mar 2017

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products,

60RISCO

GitHub PoC★ 14

cve-2017-5638 Vulnerable site sample

CVE-2017-5638CRITICALsob ataqueransomware15 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 83

MS16-032(CVE-2016-0099) for SERVICE ONLY

CVE-2016-0099HIGHsob ataqueransomware15 mar 2017

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8

98RISCO

GitHub PoC★ 3

CVE-2016-4657 for NintendoSwitch rwx

CVE-2016-4657HIGHsob ataque13 mar 2017

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory

98RISCO

GitHub PoC★ 1

Example PHP Exploiter for CVE-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware13 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 2

A php based exploiter for CVE-2017-5638.

CVE-2017-5638CRITICALsob ataqueransomware12 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 16

These are just some script which you can use to detect and exploit the Apache Struts Vulnerability (CVE-2017-5638)

CVE-2017-5638CRITICALsob ataqueransomware12 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 442

An exploit for Apache Struts CVE-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware12 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 2

Tweaking original PoC (https://github.com/rapid7/metasploit-framework/issues/8064) to work on self-signed certificates

CVE-2017-5638CRITICALsob ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 1

This is Valve for Tomcat7 to block Struts 2 Remote Code Execution vulnerability (CVE-2017-5638)

CVE-2017-5638CRITICALsob ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC

test struts2 vulnerability CVE-2017-5638 in Mac OS X

CVE-2017-5638CRITICALsob ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC

CVE: 2017-5638 in different formats

CVE-2017-5638CRITICALsob ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC

jrrombaldo/CVE-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 8

detection for Apache Struts recon and compromise

CVE-2017-5638CRITICALsob ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC

Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)

CVE-2017-5638CRITICALsob ataqueransomware10 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 35

Demo Application and Exploit

CVE-2017-5638CRITICALsob ataqueransomware10 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 21

Example PoC Code for CVE-2017-5638 | Apache Struts Exploit

CVE-2017-5638CRITICALsob ataqueransomware10 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 25

S2-045 漏洞 POC-TOOLS CVE-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware09 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC

bongbongco/cve-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware08 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 23

Struts2 S2-045（CVE-2017-5638）Vulnerability environment - http://www.mottoin.com/97954.html

CVE-2017-5638CRITICALsob ataqueransomware07 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 61

Struts2 S2-045（CVE-2017-5638）Exp with GUI

CVE-2017-5638CRITICALsob ataqueransomware07 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 81

An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit

CVE-2016-7255HIGHsob ataque02 mar 2017

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,

93RISCO

GitHub PoC★ 1

A brief report on CVE-2016-4117 (A vulnerability in Adobe Flash)

CVE-2016-4117HIGHsob ataque23 fev 2017

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as

100RISCO

GitHub PoC

不完美的利用代码，只能用于学习:)

CVE-2016-4669—21 fev 2017

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS b

38RISCO

GitHub PoC

Proof of concept exploit for CVE-2012-1723

CVE-2012-1723CRITICALsob ataqueransomware20 fev 2017

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.