Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.713exploits catalogados
39.298CVEs com exploração pública
24.695testados em laboratório
83.713 exploits
GitHub PoC
Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE
CVE-2021-41773HIGHsob ataqueransomware11 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC
CyberTuz/CVE-2019-15107_detection
CVE-2019-15107CRITICALsob ataqueransomware10 out 2021
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗
GitHub PoC★ 147
CVE-2021-41773 CVE-2021-42013漏洞批量检测工具
CVE-2021-41773HIGHsob ataqueransomware09 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 2
cve-2021-41773 即 cve-2021-42013 批量检测脚本
CVE-2021-41773HIGHsob ataqueransomware09 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 5
Remote Code Execution POC for CVE-2020-0796
CVE-2020-0796CRITICALsob ataqueransomware09 out 2021
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗
GitHub PoC★ 23
Apache (Linux) CVE-2021-41773/2021-42013 Mass Vulnerability Checker
CVE-2021-41773HIGHsob ataqueransomware09 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2021-41773HIGHsob ataqueransomware09 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-30807HIGHsob ataque09 out 2021
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS
76RISCO
abrir ↗
VulnCheck XDB
local
CVE-2020-0796CRITICALsob ataqueransomware09 out 2021
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2020-0796CRITICALsob ataqueransomware09 out 2021
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗
GitHub PoC★ 133
Exploit for CVE-2021-30807
CVE-2021-30807HIGHsob ataque09 out 2021
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS
76RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware09 out 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
Murasame-nc/CVE-2020-0796-LPE-POC
CVE-2020-0796CRITICALsob ataqueransomware09 out 2021
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗
GitHub PoC★ 1
Apache 2.4.49 Path Traversal Vulnerability Checker
CVE-2021-41773HIGHsob ataqueransomware09 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 1
This is a simple POC for Apache/2.4.49 Path Traversal Vulnerability
CVE-2021-41773HIGHsob ataqueransomware08 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 7
Exploit for Apache 2.4.49
CVE-2021-41773HIGHsob ataqueransomware08 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
Exploit-DB
django-unicorn 0.35.3 - Stored Cross-Site Scripting (XSS)
CVE-2021-42053—webappspython08 out 2021
The Unicorn framework through 0.35.3 for Django allows XSS via component.name.
23RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-1938CRITICALsob ataque08 out 2021
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISCO
abrir ↗
Exploit-DB
Maian-Cart 3.8 - Remote Code Execution (RCE) (Unauthenticated)
CVE-2021-32172—webappsphp08 out 2021
Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the
50RISCO
abrir ↗
GitHub PoC★ 3
POC
CVE-2021-41773HIGHsob ataqueransomware08 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-40444HIGHsob ataqueransomware08 out 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 1
A Zeek package which raises notices for Path Traversal/RCE in Apache HTTP Server 2.4.49 (CVE-2021-41773) and 2.4.50 (CVE-2021-42013)
CVE-2021-41773HIGHsob ataqueransomware08 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 11
Fast python tool to test apache path traversal CVE-2021-41773 in a List of url
CVE-2021-41773HIGHsob ataqueransomware08 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC★ 2
I have come-up with a POC for Payara Micro Community 5.2021.6 - Directory Traversal, Please refer above reference field.
CVE-2021-41381—08 out 2021
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
50RISCO
abrir ↗
GitHub PoC★ 15
Apache 2.4.50 Path traversal vulnerability
CVE-2021-42013CRITICALsob ataqueransomware08 out 2021
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
abrir ↗
GitHub PoC
pisut4152/Sigma-Rule-for-CVE-2021-41773-and-CVE-2021-42013-exploitation-attempt
CVE-2021-41773HIGHsob ataqueransomware08 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHsob ataqueransomware08 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-40870CRITICALsob ataque08 out 2021
An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous
100RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2016-9079HIGHsob ataque08 out 2021
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis
100RISCO
abrir ↗
GitHub PoC
A Python script to check if an Apache web server is vulnerable to CVE-2021-41773
CVE-2021-41773HIGHsob ataqueransomware08 out 2021
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
← anteriorpágina 742 / 2.791próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.