Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.874exploits catalogados

38.827CVEs com exploração pública

24.695testados em laboratório

Todos Referência 24.997Exploit-DB 24.485GitHub PoC 16.074VulnCheck XDB 9.343Nuclei 4.457Metasploit 3.518✓ só verificadosrecentes populares risco

82.875 exploits

GitHub PoC★ 2

Essay (and PoCs) about CVE-2021-41773, a remote code execution vulnerability in Apache 2.4.49 🕸️

CVE-2021-41773HIGHsob ataqueransomware12 mai 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 2

Nuclei Template for CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 6

Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services

CVE-2022-26923HIGHsob ataque12 mai 2022

Active Directory Domain Services Elevation of Privilege Vulnerability

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-41773HIGHsob ataqueransomware12 mai 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Exploit-DB

F5 BIG-IP 16.0.x - Remote Code Execution (RCE)

CVE-2022-1388CRITICALsob ataqueransomwareremotemultiple12 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2020-0688HIGHsob ataqueransomware12 mai 2022

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALsob ataqueransomware12 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Exploit-DB

WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated)

CVE-2022-1103—webappsphp11 mai 2022

Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload

28RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Exploit-DB

WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF)

CVE-2021-24581—webappsphp11 mai 2022

Blue Admin <= 21.06.01 - CSRF to Stored Cross-Site Scripting (XSS)

23RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

GitHub PoC★ 7

A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.

CVE-2022-26937CRITICAL11 mai 2022

Windows Network File System Remote Code Execution Vulnerability

70RISCO

abrir ↗

GitHub PoC★ 1

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.

CVE-2013-4710—11 mai 2022

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp

50RISCO

abrir ↗

Exploit-DB

MyBB 1.8.29 - MyBB 1.8.29 - Remote Code Execution (RCE) (Authenticated)

CVE-2022-24734HIGHwebappsphp11 mai 2022

Remote code execution in mybb

78RISCO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388 Scanner

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Exploit-DB

Akka HTTP 10.1.14 - Denial of Service

CVE-2021-42697—remotemultiple11 mai 2022

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, whic

35RISCO

abrir ↗

Exploit-DB

Ruijie Reyee Mesh Router - Remote Code Execution (RCE) (Authenticated)

CVE-2021-43164—remotehardware11 mai 2022

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.191

35RISCO

abrir ↗

Exploit-DB

Google Chrome 78.0.3904.70 - Remote Code Execution

CVE-2019-13720HIGHsob ataqueremotemultiple11 mai 2022

Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap

83RISCO

abrir ↗

Exploit-DB

DLINK DIR850 - Open Redirect

CVE-2021-46379—remotehardware11 mai 2022

DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrust

43RISCO

abrir ↗

Exploit-DB

Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS)

CVE-2021-31673—webappsmultiple11 mai 2022

A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remo

23RISCO

abrir ↗

Exploit-DB

Anuko Time Tracker - SQLi (Authenticated)

CVE-2022-24707HIGHwebappsphp11 mai 2022

SQL injection in anuko timetracker

41RISCO

abrir ↗

GitHub PoC★ 5

AmirHoseinTangsiriNET/CVE-2022-1388-Scanner

CVE-2022-1388CRITICALsob ataqueransomware11 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)

CVE-2021-44595—localwindows11 mai 2022

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send m

28RISCO

abrir ↗

Exploit-DB

DLINK DIR850 - Insecure Access Control

CVE-2021-46378—remotehardware11 mai 2022

DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote

35RISCO

abrir ↗

GitHub PoC★ 1

CVE-2012-6636—11 mai 2022

The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote atta

50RISCO

abrir ↗

Exploit-DB

ExifTool 12.23 - Arbitrary Code Execution

CVE-2021-22204MEDIUMsob ataquelocallinux11 mai 2022

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.