Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.713exploits catalogados

39.298CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9.648Nuclei 4.478Metasploit 3.523✓ só verificadosrecentes populares risco

83.713 exploits

GitHub PoC★ 11

CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)

CVE-2021-21972CRITICALsob ataqueransomware03 out 2021

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISCO

abrir ↗

GitHub PoC★ 2

Exploit code for CVE-2007-2447 written in Python3.

CVE-2007-2447—03 out 2021

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2021-40444HIGHsob ataqueransomware03 out 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 7

Proof On Concept — Pulse Secure CVE-2021-22893

CVE-2021-22893CRITICALsob ataqueransomware03 out 2021

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windo

90RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2021-40444HIGHsob ataqueransomware03 out 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2021-34523CRITICALsob ataqueransomware02 out 2021

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-22005CRITICALsob ataqueransomware02 out 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISCO

abrir ↗

GitHub PoC★ 1

puckiestyle/CVE-2021-3493

CVE-2021-3493HIGHsob ataque02 out 2021

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

abrir ↗

GitHub PoC★ 16

POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)

CVE-2021-34523CRITICALsob ataqueransomware02 out 2021

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 2

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)

CVE-2019-17662—02 out 2021

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RISCO

abrir ↗

GitHub PoC

wdjcy/CVE-2021-26084

CVE-2021-26084CRITICALsob ataqueransomware02 out 2021

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

GitHub PoC★ 22

the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

CVE-2021-22005CRITICALsob ataqueransomware02 out 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISCO

abrir ↗

GitHub PoC★ 12

PoC for CVE-2021-3129 (Laravel)

CVE-2021-3129CRITICALsob ataqueransomware01 out 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

abrir ↗

Metasploit600

ManageEngine ADAudit Plus Authenticated File Write RCE

CVE-2021-42847—01 out 2021

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files.

40RISCO

abrir ↗

GitHub PoC★ 1

daletoniris/CVE-2021-22555-esc-priv

CVE-2021-22555HIGHsob ataque01 out 2021

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

GitHub PoC★ 1

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.

CVE-2019-17662—01 out 2021

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RISCO

abrir ↗

GitHub PoC

CloudMe CVE-2018-6892 POC

CVE-2018-6892—01 out 2021

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RISCO

abrir ↗

Exploit-DB

WhatsUpGold 21.0.3 - Stored Cross-Site Scripting (XSS)

CVE-2021-41318—webappsmultiple01 out 2021

In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input.

23RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-35211CRITICALsob ataqueransomware30 set 2021

Serv-U Remote Memory Escape Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 28

Cisco RV110w UPnP stack overflow

CVE-2021-34730CRITICAL30 set 2021

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

53RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-34730CRITICAL30 set 2021

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

53RISCO

abrir ↗

GitHub PoC★ 12

Simple Serv-U CVE-2021-35211 PoC

CVE-2021-35211CRITICALsob ataqueransomware30 set 2021

Serv-U Remote Memory Escape Vulnerability

100RISCO

abrir ↗

Exploit-DB

WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting

CVE-2021-24286—webappsphp29 set 2021

Redirect 404 to Parent < 1.3.1 - Reflected Cross-Site Scripting (XSS)

43RISCO

abrir ↗

GitHub PoC★ 5

This docx exploit uses res files inside Microsoft .docx file to execute malicious files. This exploit is related to CVE-2021-40444

CVE-2021-40444HIGHsob ataqueransomware29 set 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC

漏洞复现与poc收集，CVE-2021-21975，cve-2021-22005，CVE-2021-26295，VMware vCenter任意文件读取

CVE-2021-21975CRITICALsob ataqueransomware29 set 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RISCO

abrir ↗

GitHub PoC

CVE-2021-25162

CVE-2021-25162—29 set 2021

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

28RISCO

abrir ↗

Exploit-DB

WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting (XSS)

CVE-2021-24287—webappsphp29 set 2021

Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

43RISCO

abrir ↗

GitHub PoC

According to researchers with Rapid7, over 110,000 devices appear on internet, which run stable Samba versions, while 92,500 seem to run unstable Samba versions, for which there is no fix. The newest Samba models, including the models 4.6.x before 4.6.4, 4.5.x before 4.5.10 and 3.5.0 before 4.4.13, was impacted by this error. May 24, 2017, Samba released version 4.6.4, which fixes a serious remote code execution vulnerability, vulnerability number CVE-2017-7494, which affected Samba 3.5.0 onwards. Vulnerability number: CVE-2017-7494 Severity Rating: High Affected software: • Samba Version < 4.6.4 • Samba Version < 4.5.10 • Samba Version < 4.4.14 Unaffected software: • Samba Version = 4.6.4 • Samba Version = 4.5.10 • Samba Version = 4.4.14

CVE-2017-7494CRITICALsob ataqueransomware29 set 2021

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISCO

abrir ↗

Exploit-DB

WordPress Plugin TranslatePress 2.0.8 - Stored Cross-Site Scripting (XSS) (Authenticated)

CVE-2021-24610—webappsphp28 set 2021

TranslatePress < 2.0.9 - Authenticated Stored Cross-Site Scripting

23RISCO

abrir ↗

GitHub PoC★ 37

rwincey/CVE-2021-22005

CVE-2021-22005CRITICALsob ataqueransomware28 set 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.