Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

4.202 exploits

Nucleimedium

Joomla! Webservice - Password Disclosure

CVE-2023-23752MEDIUMsob ataque

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

Nucleimedium

Ozette Plugins - Cross-Site Request Forgery

CVE-2023-23897MEDIUM

WordPress Simple Mobile URL Redirect Plugin <= 1.7.2 is vulnerable to Cross Site Request Forgery (CSRF)

28RISCO

abrir ↗

Nucleicritical

WordPress GamiPress <= 2.5.7 - SQL Injection

CVE-2023-24000HIGH

WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection

36RISCO

abrir ↗

Nucleihigh

CData RSB Connect v22.0.8336 - Server Side Request Forgery

CVE-2023-24243HIGH

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

36RISCO

abrir ↗

Nucleimedium

Squidex <7.4.0 - Cross-Site Scripting

CVE-2023-24278MEDIUM

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.

28RISCO

abrir ↗

Nucleimedium

mojoPortal 2.7.0.0 - Cross-Site Scripting

CVE-2023-24322MEDIUM

A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows atta

40RISCO

abrir ↗

Nucleimedium

Temenos T24 R20 - Cross-Site Scripting

CVE-2023-24367—

15RISCO

abrir ↗

Nucleicritical

UserPro <= 5.1.1 - Authentication Bypass

CVE-2023-2437CRITICAL

UserPro <= 5.1.1 - Authentication Bypass to Administrator

63RISCO

abrir ↗

Nucleimedium

Citrix Gateway and Citrix ADC - Cross-Site Scripting

CVE-2023-24488MEDIUM

Cross site scripting

70RISCO

abrir ↗

Nucleicritical

Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution

CVE-2023-24489CRITICALsob ataque

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, coul

100RISCO

abrir ↗

Nucleimedium

phpIPAM - 1.6 - Cross-Site Scripting

CVE-2023-24657MEDIUM

phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter

48RISCO

abrir ↗

Nucleimedium

PMB 7.4.6 - Cross-Site Scripting

CVE-2023-24733—

PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /ad

18RISCO

abrir ↗

Nucleimedium

PMB 7.4.6 - Open Redirect

CVE-2023-24735—

PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerabil

18RISCO

abrir ↗

Nucleimedium

PMB v7.4.6 - Cross-Site Scripting

CVE-2023-24737—

PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /ad

18RISCO

abrir ↗

Nucleicritical

Appium Desktop Server - Remote Code Execution

CVE-2023-2479CRITICAL

OS Command Injection in appium/appium-desktop

48RISCO

abrir ↗

Nucleicritical

vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution

CVE-2023-25135CRITICAL

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP reques

68RISCO

abrir ↗

Nucleicritical

GeoServer OGC Filter - SQL Injection

CVE-2023-25157CRITICAL

Unfiltered SQL Injection Vulnerabilities in Geoserver

85RISCO

abrir ↗

Nucleimedium

WordPress Easy Forms for Mailchimp Plugin < 6.8.9 - Cross-Site Scripting

CVE-2023-2518MEDIUM

Easy Forms for Mailchimp < 6.8.9 - Reflected XSS

28RISCO

abrir ↗

Nucleihigh

Apache Druid Kafka Connect - Remote Code Execution

CVE-2023-25194HIGH

Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect

78RISCO

abrir ↗

Nucleicritical

D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection

CVE-2023-25280CRITICALsob ataque

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a cr

95RISCO

abrir ↗

Nucleimedium

ChurchCRM 4.5.3 - Cross-Site Scripting

CVE-2023-25346MEDIUM

A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web

28RISCO

abrir ↗

Nucleihigh

Metersphere - Arbitrary File Read

CVE-2023-25573HIGH

Improper access control to download file in metersphere

48RISCO

abrir ↗

Nucleicritical

Ruckus Wireless Admin - Remote Code Execution

CVE-2023-25717CRITICALsob ataque

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated

95RISCO

abrir ↗

Nucleicritical

ZoneMinder Snapshots - Command Injection

CVE-2023-26035HIGH

ZoneMinder vulnerable to Missing Authorization

58RISCO

abrir ↗

Nucleihigh

Lexmark Printers - Command Injection

CVE-2023-26067HIGH

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

68RISCO

abrir ↗

Nucleimedium

KiviCare WordPress Plugin - Cross-Site Scripting

CVE-2023-2624—

KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleihigh

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

CVE-2023-26255HIGH

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2

68RISCO

abrir ↗

Nucleihigh

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

CVE-2023-26256HIGH

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2

61RISCO

abrir ↗

Nucleicritical

Arcserve UDP <= 9.0.6034 - Authentication Bypass

CVE-2023-26258—

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashSe

50RISCO

abrir ↗

Nucleihigh

Adobe Coldfusion - Authentication Bypass

CVE-2023-26347HIGH

CVE-2023-38205 issues | ColdFusion Admin Panel Access

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.