Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.713exploits catalogados
39.298CVEs com exploração pública
24.695testados em laboratório
TodosReferência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9.648Nuclei 4.478Metasploit 3.523✓ só verificadosrecentespopularesrisco
83.713 exploits
GitHub PoC★ 3
[CVE-2021-26084] Confluence pre-auth RCE test script
CVE-2021-26084CRITICALsob ataqueransomware18 set 2021
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
GitHub PoC★ 11
Scan for evidence of CVE-2021-30860 (FORCEDENTRY) exploit
CVE-2021-30860HIGHsob ataque18 set 2021
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali
93RISCO
abrir ↗
Metasploit600
Hikvision IP Camera Unauthenticated Command Injection
CVE-2021-36260CRITICALsob ataque18 set 2021
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
GitHub PoC★ 1
A Vagrant VM test lab to learn about CVE-2021-38647 in the Open Management Infrastructure agent (aka "omigod").
CVE-2021-38647CRITICALsob ataqueransomware18 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26084CRITICALsob ataqueransomware18 set 2021
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-38647CRITICALsob ataqueransomware18 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-3129CRITICALsob ataqueransomware17 set 2021
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISCO
abrir ↗
GitHub PoC★ 2
CVE-2021-40539 POC
CVE-2021-40539CRITICALsob ataqueransomware17 set 2021
Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resulta
100RISCO
abrir ↗
Metasploit300
Wordpress BulletProof Security Backup Disclosure
CVE-2021-39327MEDIUM17 set 2021
BulletProof Security <= 5.1 Sensitive Information Disclosure
70RISCO
abrir ↗
Exploit-DB
WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass
CVE-2021-34646CRITICALwebappsphp17 set 2021
Booster for WooCommerce <= 5.4.3 Authentication Bypass
60RISCO
abrir ↗
GitHub PoC★ 9
quynhle7821/CVE-2021-2302
CVE-2021-2302CRITICAL16 set 2021
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). Supported
48RISCO
abrir ↗
GitHub PoC★ 6
CVE-2021-2456
CVE-2021-2456CRITICAL16 set 2021
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ana
70RISCO
abrir ↗
Metasploit600
ManageEngine ServiceDesk Plus CVE-2021-44077
CVE-2021-44077CRITICALsob ataque16 set 2021
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014
100RISCO
abrir ↗
GitHub PoC★ 233
Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)
CVE-2021-38647CRITICALsob ataqueransomware16 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-38647CRITICALsob ataqueransomware16 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-38647CRITICALsob ataqueransomware16 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 2
A PoC exploit for CVE-2021-38647 RCE in OMI
CVE-2021-38647CRITICALsob ataqueransomware16 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 20
OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research team, specifically CVE-2021-38647.
CVE-2021-38647CRITICALsob ataqueransomware16 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-38647CRITICALsob ataqueransomware15 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 8
CVE-2021-38647 POC for RCE
CVE-2021-38647CRITICALsob ataqueransomware15 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 5
CVE-2021-38647 AKA "OMIGOD" vulnerability in Windows OMI
CVE-2021-38647CRITICALsob ataqueransomware15 set 2021
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-33766HIGHsob ataque15 set 2021
Microsoft Exchange Server Information Disclosure Vulnerability
100RISCO
abrir ↗
GitHub PoC
jaysharma786/CVE-2021-29003
CVE-2021-29003—15 set 2021
Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacter
35RISCO
abrir ↗
GitHub PoC★ 10
CVE-2021-33766-poc
CVE-2021-33766HIGHsob ataque15 set 2021
Microsoft Exchange Server Information Disclosure Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 824
CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
CVE-2021-40444HIGHsob ataqueransomware15 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware15 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 19
k8gege/CVE-2021-40444
CVE-2021-40444HIGHsob ataqueransomware14 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
Malicious document builder for CVE-2021-40444
CVE-2021-40444HIGHsob ataqueransomware14 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware14 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 3
CVE-2018-15473 Exploit
CVE-2018-15473MEDIUM14 set 2021
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati
70RISCO
abrir ↗
← anteriorpágina 749 / 2.791próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.