Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
82.877exploits catalogados
38.827CVEs com exploração pública
24.695testados em laboratório
TodosReferência 24.997Exploit-DB 24.485GitHub PoC 16.077VulnCheck XDB 9.343Nuclei 4.457Metasploit 3.518✓ só verificadosrecentespopularesrisco
82.877 exploits
GitHub PoC★ 3
A Zeek detector for CVE-2022-24497.
Windows Network File System Remote Code Execution Vulnerability
60RISCO
abrir ↗GitHub PoC★ 68
CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞 命令执行、批量检测脚本、文件写入
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC
VMware Workspace ONE Access远程代码执行漏洞 / Code By:Jun_sheng
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC★ 16
VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗VulnCheck XDB
initial-access
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗VulnCheck XDB
initial-access
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗VulnCheck XDB
initial-access
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
78RISCO
abrir ↗VulnCheck XDB
infoleak
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
abrir ↗GitHub PoC★ 2
AkuCyberSec/CVE-2017-8917-Joomla-370-SQL-Injection
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
abrir ↗GitHub PoC★ 3
A Zeek CVE-2022-24491 detector.
Windows Network File System Remote Code Execution Vulnerability
60RISCO
abrir ↗GitHub PoC★ 2
Chocapikk/CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC★ 1
Greenwolf/CVE-2022-1175
Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor
63RISCO
abrir ↗GitHub PoC★ 3
TerraMaster TOS Unauthenticated Remote Command Execution(RCE) Vulnerability CVE-2022-24990
TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen
100RISCO
abrir ↗GitHub PoC★ 23
spring4shell | CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir ↗GitHub PoC★ 4
Greenwolf/CVE-2022-1162
A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE
85RISCO
abrir ↗VulnCheck XDB
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC
Wangsafz/cve-2017-0358.sh
ntfs-3g: Modprobe influence vulnerability via environment variables
56RISCO
abrir ↗VulnCheck XDB
initial-access
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗VulnCheck XDB
initial-access
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC★ 1
corelight/cve-2022-22954
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC★ 10
PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC★ 12
提供批量扫描URL以及执行命令功能。Workspace ONE Access 模板注入漏洞，可执行任意代码
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC★ 1
CVE-2022-22954 Açığı test etme
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC★ 1
mumu2020629/-CVE-2022-22954-scanner
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC
lucksec/VMware-CVE-2022-22954
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗Exploit-DB
Telesquare TLR-2855KS6 - Arbitrary File Deletion
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system fil
60RISCO
abrir ↗GitHub PoC★ 4
aniqfakhrul/CVE-2022-22954
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗Exploit-DB
Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI)
Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privilege
50RISCO
abrir ↗GitHub PoC★ 11
CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗GitHub PoC★ 279
POC for VMWARE CVE-2022-22954
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.