Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.745exploits catalogados

38.712CVEs com exploração pública

24.695testados em laboratório

Todos Referência 24.884Exploit-DB 24.485GitHub PoC 16.068VulnCheck XDB 9.333Nuclei 4.457Metasploit 3.518✓ só verificadosrecentes populares risco

82.745 exploits

GitHub PoC★ 21

All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools (MSDT) on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence.

CVE-2022-30190HIGHsob ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 8

orwagodfather/CVE-2022-22954

CVE-2022-22954CRITICALsob ataqueransomware03 jun 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISCO

GitHub PoC★ 2

Follina POC by John Hammond

CVE-2022-30190HIGHsob ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 5

Generate SSRF payloads

CVE-2021-22054HIGHsob ataque03 jun 2022

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

100RISCO

GitHub PoC

Powershell script to mitigate cve-2022-30190

CVE-2022-30190HIGHsob ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

Exploit-DB

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection

CVE-2021-46422—remotehardware03 jun 2022

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RISCO

GitHub PoC

This is to patch CVE-2022-30190. Use at your own risk.

CVE-2022-30190HIGHsob ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

initial-access

CVE-2022-26134CRITICALsob ataqueransomware03 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

VulnCheck XDB

client-side

CVE-2022-30190HIGHsob ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

initial-access

CVE-2022-26134CRITICALsob ataqueransomware03 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALsob ataqueransomware03 jun 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RISCO

GitHub PoC★ 1

This repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux confluence servers.

CVE-2022-26134CRITICALsob ataqueransomware03 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

VulnCheck XDB

infoleak

CVE-2021-22054HIGHsob ataque03 jun 2022

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

100RISCO

VulnCheck XDB

client-side

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

initial-access

CVE-2020-2551CRITICALsob ataque02 jun 2022

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISCO

VulnCheck XDB

client-side

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

CVE-2020-2551 Exploiter

CVE-2020-2551CRITICALsob ataque02 jun 2022

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISCO

VulnCheck XDB

client-side

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

VulnCheck XDB

local

CVE-2021-35064—02 jun 2022

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn

60RISCO

Metasploit600

Atlassian Confluence Namespace OGNL Injection

CVE-2022-26134CRITICALsob ataqueransomware02 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

GitHub PoC★ 3

Python script to exploit CVE-2021-35064 and CVE-2021-36356

CVE-2021-35064—02 jun 2022

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn

60RISCO

GitHub PoC★ 2

swaiist/CVE-2022-30190-Fix

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 390

CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

Mitigates the "Folina"-ZeroDay (CVE-2022-30190)

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 2

gyaansastra/CVE-2022-30190

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

ITMarcin2211/CVE-2022-30190

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 2

A very simple MSDT "Follina" exploit **patched**

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC

lalkaltest/CVE-2021-43798

CVE-2021-43798HIGHsob ataque02 jun 2022

Grafana path traversal

100RISCO

GitHub PoC★ 23

A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190)

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 2

MSDT protocol disabler (CVE-2022-30190 patch tool)

CVE-2022-30190HIGHsob ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.