Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.639exploits catalogados
39.242CVEs com exploração pública
24.695testados em laboratório
TodosReferência 25.347Exploit-DB 24.485GitHub PoC 16.170VulnCheck XDB 9.636Nuclei 4.478Metasploit 3.523✓ só verificadosrecentespopularesrisco
83.640 exploits
GitHub PoC★ 1
Scan and patch tool for CVE-2021-44228 and related log4j concerns.
CVE-2021-44228CRITICALsob ataqueransomware23 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 24
一个针对shiro反序列化漏洞(CVE-2016-4437)的快速利用工具/A simple tool targeted at shiro framework attacks with ysoserial.
CVE-2016-4437CRITICALsob ataque23 dez 2021
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-42013CRITICALsob ataqueransomware23 dez 2021
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
abrir ↗
GitHub PoC★ 10
Apache 远程代码执行 （CVE-2021-42013）批量检测工具：Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点，发现 Apache HTTP Server 2.4.50 中针对 CVE-2021-41773 的修复不够充分。攻击者可以使用路径遍历攻击将 URL 映射到由类似别名的指令配置的目录之外的文件。如果这些目录之外的文件不受通常的默认配置“要求全部拒绝”的保护，则这些请求可能会成功。如果还为这些别名路径启用了 CGI 脚本，则这可能允许远程代码执行。此问题仅影响 Apache 2.4.49 和 Apache 2.4.50，而不影响更早版本。
CVE-2021-42013CRITICALsob ataqueransomware23 dez 2021
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
abrir ↗
GitHub PoC
Log4j 2 (CVE-2021-44228) vulnerability scanner for Windows OS
CVE-2021-44228CRITICALsob ataqueransomware22 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 1
CVE-2021-22205 的批量检测脚本
CVE-2021-22205CRITICALsob ataqueransomware22 dez 2021
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2022-29383—22 dez 2021
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USE
50RISCO
abrir ↗
GitHub PoC
Script en bash que permite identificar la vulnerabilidad Log4j CVE-2021-44228 de forma remota.
CVE-2021-44228CRITICALsob ataqueransomware22 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2019-5736—22 dez 2021
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b
60RISCO
abrir ↗
GitHub PoC★ 3
Proof of Concept of apache log4j LDAP lookup vulnerability. CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware22 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 2
Log4Shell Demo with AWS
CVE-2021-44228CRITICALsob ataqueransomware22 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 7
Generic Scanner for Apache log4j RCE CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware22 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 13
A Smart Log4Shell/Log4j/CVE-2021-44228 Scanner
CVE-2021-44228CRITICALsob ataqueransomware22 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-45105MEDIUM22 dez 2021
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
55RISCO
abrir ↗
GitHub PoC★ 33
Scan and patch tool for CVE-2021-44228 and related log4j concerns.
CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 1
POC for CVE-2021-44228 within Springboot
CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 7
Decrypt FortiGate configuration secrets
CVE-2019-6693MEDIUMsob ataqueransomware21 dez 2021
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke
63RISCO
abrir ↗
GitHub PoC
相关的复现和文档
CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2019-6693MEDIUMsob ataqueransomware21 dez 2021
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke
63RISCO
abrir ↗
GitHub PoC★ 58
Ansible detector scanner playbook to verify target Linux hosts using the official Red Hat Log4j detector script RHSB-2021-009 Remote Code Execution - log4j (CVE-2021-44228)
CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
halencarjunior/grafana-CVE-2021-43798
CVE-2021-43798HIGHsob ataque21 dez 2021
Grafana path traversal
100RISCO
abrir ↗
GitHub PoC
Webmin Local File Include (unauthenticated)
CVE-2006-3392—21 dez 2021
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote
60RISCO
abrir ↗
GitHub PoC
Python script to detect Log4Shell Vulnerability CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
Log4j2 CVE-2021-44228 hack demo for a springboot app
CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
offensity/CVE-2019-0708
CVE-2019-0708CRITICALsob ataqueransomware20 dez 2021
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 1
Bash que instala los sploit CVE-2017-0781 y CVE-2017-0785 y lo necesario para su usos.
CVE-2017-0781—20 dez 2021
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1
28RISCO
abrir ↗
GitHub PoC★ 2
Windows Batch Scrip to Fix the log4j-issue-CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 5
Vulnerable web application to test CVE-2021-44228 / log4shell and forensic artifacts from an example attack
CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
Exploit-DB
WBCE CMS 1.5.1 - Admin Password Reset
CVE-2021-3817CRITICALwebappsphp20 dez 2021
SQL Injection in wbce/wbce_cms
60RISCO
abrir ↗
← anteriorpágina 714 / 2.788próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.