Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.451exploits catalogados
38.590CVEs com exploração pública
24.695testados em laboratório
TodosReferência 24.767Exploit-DB 24.485GitHub PoC 15.955VulnCheck XDB 9.270Nuclei 4.456Metasploit 3.518✓ só verificadosrecentespopularesrisco
82.451 exploits
Exploit-DB
ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)
CVE-2021-42750—webappsmultiple09 ago 2022
A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrat
23RISCO
abrir ↗
Exploit-DB
ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)
CVE-2021-42751—webappsmultiple09 ago 2022
A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrat
23RISCO
abrir ↗
Exploit-DB
PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)
CVE-2020-2038HIGHremotemultiple09 ago 2022
PAN-OS: OS command injection vulnerability in the management web interface
78RISCO
abrir ↗
GitHub PoC★ 25
Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101)
CVE-2022-31101HIGH09 ago 2022
SQL Injection in prestashop/blockwishlist
61RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware08 ago 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 1
vesperp/CVE-2021-20038-SonicWall-RCE
CVE-2021-20038CRITICALsob ataqueransomware08 ago 2022
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows
100RISCO
abrir ↗
GitHub PoC
PoC for CVE-2021-4034.
CVE-2021-4034HIGHsob ataqueransomware08 ago 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC
CVE-2007-2447 exploit written in python to get reverse shell
CVE-2007-2447—07 ago 2022
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2016-10033CRITICALsob ataque05 ago 2022
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RISCO
abrir ↗
GitHub PoC
PHPMailer < 5.2.18 Remote Code Execution
CVE-2016-10033CRITICALsob ataque05 ago 2022
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RISCO
abrir ↗
GitHub PoC★ 6
Webkit (Safari) - Exploit
CVE-2022-22620HIGHsob ataque04 ago 2022
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS
76RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHsob ataqueransomware04 ago 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2022-22620HIGHsob ataque04 ago 2022
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS
76RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-36260CRITICALsob ataque04 ago 2022
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-36260CRITICALsob ataque03 ago 2022
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
GitHub PoC★ 3
LY613313/CVE-2022-22947
CVE-2022-22947CRITICALsob ataque03 ago 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RISCO
abrir ↗
GitHub PoC★ 170
海康威视RCE漏洞 批量检测和利用工具
CVE-2021-36260CRITICALsob ataque03 ago 2022
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
GitHub PoC
aweiiy/CVE-2021-43617
CVE-2021-43617—03 ago 2022
Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Val
28RISCO
abrir ↗
GitHub PoC★ 5
Exploit to capitalize on vulnerability CVE-2020-2038.
CVE-2020-2038HIGH03 ago 2022
PAN-OS: OS command injection vulnerability in the management web interface
78RISCO
abrir ↗
GitHub PoC
Apache Log4j is a logging tool written in Java. This paper focuses on what is Log4j and log4shell vulnerability and how it works, how it affects the victim, and how can this be mitigated
CVE-2021-44228CRITICALsob ataqueransomware02 ago 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP 59777 port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the vulnerability. Download the PDF and enjoy !!! Cheers !!!
CVE-2019-6447—02 ago 2022
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi
50RISCO
abrir ↗
Exploit-DB
uftpd 2.10 - Directory Traversal (Authenticated)
CVE-2020-20277—remotelinux02 ago 2022
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server ver
28RISCO
abrir ↗
VulnCheck XDB
local
CVE-2022-34918—02 ago 2022
An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buff
38RISCO
abrir ↗
Metasploit500
VMware Workspace ONE Access CVE-2022-31660
CVE-2022-31660—02 ago 2022
VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A m
18RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2014-3120HIGHsob ataque01 ago 2022
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut
100RISCO
abrir ↗
Exploit-DB
WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download
CVE-2022-2551—webappsphp01 ago 2022
Duplicator < 1.4.7 - Unauthenticated Backup Download
43RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2015-5531—01 ago 2022
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp
60RISCO
abrir ↗
Exploit-DB
Wavlink WN533A8 - Password Disclosure
CVE-2022-34046—webappshardware01 ago 2022
An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via vie
43RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Duplicator 1.4.7 - Information Disclosure
CVE-2022-2552—webappsphp01 ago 2022
Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
43RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware01 ago 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
← anteriorpágina 631 / 2.749próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.