Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.853exploits catalogados
39.383CVEs com exploração pública
24.695testados em laboratório
TodosReferência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9.651Nuclei 4.478Metasploit 3.523✓ só verificadosrecentespopularesrisco
83.853 exploits
Exploit-DB
Microsoft Exchange 2019 - Server-Side Request Forgery
CVE-2021-26855CRITICALsob ataqueransomwareremotewindows14 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 1
Exploit Samba
CVE-2007-2447—14 mar 2021
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISCO
abrir ↗
GitHub PoC★ 3
Scanner and PoC for CVE-2021-26855
CVE-2021-26855CRITICALsob ataqueransomware12 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-25213CRITICALsob ataque12 mar 2021
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALsob ataqueransomware12 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALsob ataqueransomware12 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2016-3088CRITICALsob ataque12 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RISCO
abrir ↗
GitHub PoC
Will write a python script for exploiting this vulnerability
CVE-2020-25213CRITICALsob ataque12 mar 2021
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RISCO
abrir ↗
GitHub PoC
vonderchild/CVE-2016-3088
CVE-2016-3088CRITICALsob ataque12 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RISCO
abrir ↗
GitHub PoC★ 12
CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.
CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26857HIGHsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
93RISCO
abrir ↗
GitHub PoC★ 1.077
Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE
CVE-2020-14883HIGHsob ataque11 mar 2021
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2020-0796CRITICALsob ataqueransomware11 mar 2021
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗
Exploit-DB
Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)
CVE-2021-27065HIGHsob ataqueransomwarewebappswindows11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2016-3088CRITICALsob ataque11 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 5
CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065
CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
Exploit-DB
Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)
CVE-2021-26855CRITICALsob ataqueransomwarewebappswindows11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 111
proxylogon exploit - CVE-2021-26857
CVE-2021-26857HIGHsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
93RISCO
abrir ↗
GitHub PoC★ 5
Apache ActiveMQ Remote Code Execution Exploit
CVE-2016-3088CRITICALsob ataque11 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RISCO
abrir ↗
GitHub PoC★ 59
PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github
CVE-2021-26855CRITICALsob ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
Metasploit600
F5 iControl REST Unauthenticated SSRF Token Generation RCE
CVE-2021-22986CRITICALsob ataqueransomware10 mar 2021
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
100RISCO
abrir ↗
GitHub PoC★ 53
alt3kx/CVE-2021-26855_PoC
CVE-2021-26855CRITICALsob ataqueransomware10 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
Exploit-DB
Atlassian JIRA 8.11.1 - User Enumeration
CVE-2020-14181—webappsmultiple10 mar 2021
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor
60RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALsob ataqueransomware10 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALsob ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALsob ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
← anteriorpágina 790 / 2.796próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.