Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.554exploits catalogados
39.165CVEs com exploração pública
24.695testados em laboratório
83.554 exploits
Exploit-DB
Nettmp NNT 5.1 - SQLi Authentication Bypass
CVE-2021-45814—webappsphp05 jan 2022
Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel
23RISCO
abrir ↗
Exploit-DB
WordPress Plugin WP Visitor Statistics 4.7 - SQL Injection
CVE-2021-24750—webappsphp05 jan 2022
WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection
50RISCO
abrir ↗
Exploit-DB
Automox Agent 32 - Local Privilege Escalation
CVE-2021-43326—localwindows05 jan 2022
Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.
23RISCO
abrir ↗
GitHub PoC★ 120
Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.
CVE-2021-44228CRITICALsob ataqueransomware05 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
Exploit-DB
Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated)
CVE-2021-43857CRITICALremotepython05 jan 2022
Gerapy may contain remote code execution vulnerability
60RISCO
abrir ↗
GitHub PoC
A vulnerable web app for log4j2 RCE(CVE-2021-44228) exploit test.
CVE-2021-44228CRITICALsob ataqueransomware05 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 3
A simple program to demonstrate how Log4j vulnerability can be exploited ( CVE-2021-44228 )
CVE-2021-44228CRITICALsob ataqueransomware05 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
alexpena5635/CVE-2021-44228_scanner-main-Modified-
CVE-2021-44228CRITICALsob ataqueransomware05 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
Bassmaster Plugin NodeJS RCE
CVE-2014-7205—04 jan 2022
Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for t
60RISCO
abrir ↗
GitHub PoC★ 6
Searchable page for CISA Log4j (CVE-2021-44228) Affected Vendor & Software List
CVE-2021-44228CRITICALsob ataqueransomware04 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
the name of virus is the detection of microsoft defender, is the tipic antivirus
CVE-2017-0147HIGHsob ataqueransomware04 jan 2022
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
GitHub PoC
Atmail XSS-CSRF-RCE Exploit Chain
CVE-2012-2593—04 jan 2022
Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote atta
23RISCO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2021-25094—03 jan 2022
Tatsu < 3.3.12 - Unauthenticated RCE
60RISCO
abrir ↗
GitHub PoC
Log4j2 LDAP 취약점 테스트 (CVE-2021-44228)
CVE-2021-44228CRITICALsob ataqueransomware03 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 9
darkpills/CVE-2021-25094-tatsu-preauth-rce
CVE-2021-25094—03 jan 2022
Tatsu < 3.3.12 - Unauthenticated RCE
60RISCO
abrir ↗
GitHub PoC★ 7
Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8.
CVE-2021-43857CRITICAL03 jan 2022
Gerapy may contain remote code execution vulnerability
60RISCO
abrir ↗
GitHub PoC
the name of virus is the detection of microsoft defender, is the tipic antivirus
CVE-2012-0158HIGHsob ataqueransomware03 jan 2022
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls
100RISCO
abrir ↗
GitHub PoC
Log4j Vulnerability Scanner
CVE-2021-44228CRITICALsob ataqueransomware01 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
A script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks
CVE-2021-44228CRITICALsob ataqueransomware01 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
Log4j-Scanner
CVE-2021-44228CRITICALsob ataqueransomware01 jan 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, known as log4shell.
CVE-2021-44228CRITICALsob ataqueransomware31 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 1
Presents how to exploit CVE-2021-44228 vulnerability.
CVE-2021-44228CRITICALsob ataqueransomware30 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware30 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 3
trganda/CVE-2021-22204
CVE-2021-22204MEDIUMsob ataque29 dez 2021
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISCO
abrir ↗
GitHub PoC
d4rk30/CVE-2017-12943
CVE-2017-12943—29 dez 2021
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?RE
35RISCO
abrir ↗
GitHub PoC★ 5
Auerswald VoIP System Secret Backdoors -PoC
CVE-2021-40859—29 dez 2021
Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web
60RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-11546—29 dez 2021
SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailing
50RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-15133HIGHsob ataque28 dez 2021
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri
100RISCO
abrir ↗
GitHub PoC★ 11
CVE-2019-9053 Exploit for Python 3
CVE-2019-9053—28 dez 2021
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve
35RISCO
abrir ↗
GitHub PoC
"Lavel Exploit CVE-2018-15133 is a powerful exploit that allows attackers to gain unauthorized access to vulnerable systems. This exploit was originally developed as part of a Capture The Flag (CTF) challenge and has since been used by security researchers and ethical hackers to identify and address vulnerabilities in web applications.
CVE-2018-15133HIGHsob ataque28 dez 2021
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri
100RISCO
abrir ↗
← anteriorpágina 711 / 2.786próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.