Core Certified Exploits

Expert validated exploits for safe and effective pen tests

Exploit development can be an advanced penetration testing skill that takes time to master. Additionally, when on a job, pen testers often don’t have the resources to create a new exploit. Many resort to searching for and using pre-written exploits that have not been tested and must go through the timely effort of quality assurance testing in order to ensure they are secure and effective. 

Core Impact users can save time by finding all the up-to-date exploits they need in one place. We provide a robust library of exploits designed to enable pen testers to safely and efficiently conduct successful penetration tests. Whether written by our own internal team or by a third party like ExCraft, you can trust they have been thoroughly tested and validated by our experts.

Stay Informed of New Core Certified Exploits

Subscribe to receive regular email updates on new exploits available for Core Impact

 

Browse the Core Certified Exploit Library

We provide pen testers with real-time updates for a wide range of exploits for different platforms, operating systems, and applications. 

 

Search our continuously growing library to discover an exploit that will allow you to gain and retain access on the target host or application.

Title Description Date Added CVE Link Exploit Platform Exploit Type Product Name
Canon Printer TR150 Driver Local Privilege Escalation Exploit The Canon TR150 print driver is vulnerable to a privilege escalation issue. During the add printer process an attacker can overwrite a DLL and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. November 18, 2021 CVE-2021-38085 Windows Exploits / Local Impact
Mitsubishi Electric and INEA SmartRTU Source Code Disclosure Vulnerability Mitsubishi Electric meets these demands with the smartRTU. It supports protocols such as
DNP3 and IEC 60870. The smart- RTU combines the reliability and robustness of our standard
PLC technology with a smart communication gateway, the ME-RTU gateway. 		November 12, 2021 CVE-2021-40382 Exploits / Client Side SCADAPRO
Atlassian Jira Server/Data Center 8.16.0 - Cross-Site Scripting CVE-2021-26078
The number range searcher component in Jira Server and Jira Data Center
before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1
allows remote attackers inject arbitrary HTML or JavaScript via across site scripting (XSS) vulnerability. 		November 12, 2021 Exploits / Remote SCADAPRO
Jeedom 4.1.19 Authenticated Privilege Escalation Jeedom 4.1.19 Dashboard Authorized Privilege Escalation November 12, 2021 Exploits / Remote SCADAPRO
Delta Industrial Automation COMMGR (ModBus) 1.08 Denial of Service Remote Denial Delta Industrial Automation COMMGR November 12, 2021 Windows Denial of Service / Remote SCADAPRO
Confluence 7.12.2 - Arbitrary File Read CVE-2021-26085
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted
resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint.
The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

Tested against Atlassian Confluence 7.12.2 		November 12, 2021 Exploits / Remote File Disclosure SCADAPRO
ECOA Building Automation System Config file download ECOA Building Automation System configuration download November 12, 2021 Exploits / Client Side SCADA
CVE-2021-42013 CVE-2021-41773
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient.
An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives.
If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed.
If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. 		November 12, 2021 Exploits / Remote Code Execution SCADA
B&R Automation Studio WebServer Denial of Service 0-Day Remote Denial Automation Studio WebServer November 12, 2021 Windows Denial of Service / Remote SCADA
Apache 2.4.49-50 Remote Code Execution A Remote Code Execution exploit against Windows target with Apache 2.4.49-50 using CVE-2021-41773 and CVE-2021-42013 November 12, 2021 Windows Exploits / Remote Code Execution SCADA
TG8 Firewall Remote Code Execution TG8 Firewall allows remote unauthenticated users to execute arbitrary code on the remote device November 12, 2021 Exploits / Remote IOT
PLANEX CS-QP50F-ING2 Security Surveillance Smart Camera Remote Configuration Disclosure PLANEX CS-QP50F-ING2 Camera Remote Configuration Disclosure November 12, 2021 Exploits / Client Side IOT
Denver IP Camera SHO-110 Unauthenticated Snapshot Denver IP Camera SHO-110 Unauthenticated Snapshot November 12, 2021 Exploits / Client Side IOT
Cisco HyperFlex Data Platform Installer Command Injection Vulnerability Exploit The password input field in the "/auth/" and "/auth/change" endpoints of Cisco HyperFlex HX Installer Virtual Machine allow an unauthenticated attacker to execute systems commands as root. November 10, 2021 CVE-2021-1497 Linux Exploits / Remote Code Execution Impact
Apache HTTP Server Path Traversal Bypass File Disclosure Exploit A path traversal vulnerability in Apache HTTP server may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests.

This vulnerability is a bypass of CVE-2021-41773. 		November 3, 2021 CVE-2021-42013 Linux Exploits / Remote File Disclosure Impact
Microsoft Exchange Proxyshell Remote Code Execution Vulnerability Exploit A combination of a path confusion that leads to an authentication bypass (ACL), an elevation of privilege and an arbitrary file write vulnerability, allows unauthenticated attackers to execute commands with SYSTEM privileges in Microsoft Exchange Server. October 29, 2021 CVE-2021-31207 Windows Exploits / Remote Code Execution Impact
Microsoft Windows win32kbase Use After Free MisterySnail NtGdiResetDC Privileged Escalation Exploit CVE-2021-40449 is a use-after-free vulnerability in Win32k's NtGdiResetDC function. As with many other Win32k vulnerabilities, the root cause of this vulnerability lies in the ability to set user-mode callbacks and execute unexpected API functions during execution of those callbacks. The CVE-2021-40449 is triggered when the function ResetDC is executed a second time for the same handle during execution of its own callback. October 27, 2021 CVE-2021-40449 Windows Exploits / Local Impact
Microsoft MSHTML Remote Code Execution Exploit Update This is a critical vulnerability in the MSHTML rendering engine. Microsoft Office applications use the MSHTML engine to process and display web content. An adversary who successfully exploits could achieve full control over a target system by using malicious ActiveX controls to execute arbitrary code.



This Update contains the following improvements:



-Default Connection method was changed to HTTPS

-Early Release Warning was removed

-Several "Application Name" in "Supported systems" property were added
 October 21, 2021 CVE-2021-40444 Windows Exploits / Client Side Impact
Apache HTTP Server Path Traversal Exploit CVE-2021-41773 A path traversal vulnerability in Apache HTTP server may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests. October 15, 2021 CVE-2021-41773 Linux Exploits / Remote File Disclosure Impact
Open Management Infrastructure OMIGOD Remote Code Execution Exploit A remote code execution vulnerability exists in OMI. An unauthenticated, remote attacker can exploit this flaw by sending a specially crafted request to a vulnerable service over a publicly accessible remote management port.

 October 13, 2021 CVE-2021-38647 Linux Exploits / Remote Code Execution Impact
Rencode Denial Of Service This module causes a Denial of Service in rencode python library October 8, 2021 Windows Denial of Service / Remote SCADAPRO
Pelco Digital Sentry Server Remote Arbitrary File Overwrite This module will receive HTTP requests from vulnerable clients and install agents on them. October 8, 2021 Exploits / Client Side SCADAPRO
Confluence Server 7.12.4 - Remote Code Execution (Unauthenticated) In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists
that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance.
The affected versions are before version 6.13.23,
from version 6.14.0 before 7.4.11,
from version 7.5.0 before 7.11.6,
and from version 7.12.0 before 7.12.5.

Tested against Confluence 7.12.3 		October 8, 2021 Exploits / Remote Code Execution SCADAPRO
Siemens WinCC TIA Portal v13-v16 Remote Denial of Service This modules causes a Denial of Service in CCAgent.exe Siemens WinCC TIA Portal. October 8, 2021 CVE-2019-19282 Linux Denial of Service / Remote SCADA
SEL AcSELerator Architect 2.2.24 CPU Exhaustion Denial of Service This module causes a Denial of Service in SEL AcSELerator Architect October 8, 2021 Windows Denial of Service / Remote SCADA