Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.018exploits catalogados
32.219CVEs com exploração pública
1.932testados em laboratório
8.195 exploits
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware28 jan 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-3398HIGHsob ataque28 jan 2024
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote at
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864628 jan 2024
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-6933HIGH28 jan 2024
Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
68RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-7028CRITICALsob ataque28 jan 2024
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataque27 jan 2024
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-6875CRITICAL27 jan 2024
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API
85RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware27 jan 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware26 jan 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware26 jan 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware26 jan 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware26 jan 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-7028CRITICALsob ataque26 jan 2024
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RISCO
abrir
VulnCheck XDB
local
CVE-2016-5195HIGHsob ataque26 jan 2024
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir
VulnCheck XDB
initial-access
CVE-2018-19410CRITICALsob ataque25 jan 2024
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privile
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware25 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-46805HIGHsob ataqueransomware25 jan 2024
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware25 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMsob ataqueransomware25 jan 2024
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-0204CRITICAL24 jan 2024
Authentication Bypass in GoAnywhere MFT
85RISCO
abrir
VulnCheck XDB
local
CVE-2020-0787HIGHsob ataqueransomware24 jan 2024
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperl
98RISCO
abrir
VulnCheck XDB
client-side
CVE-2022-4262HIGHsob ataque24 jan 2024
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru
76RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware24 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
local
CVE-2017-1315624 jan 2024
An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,
43RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware24 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware23 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware23 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware23 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware23 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware23 jan 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
anteriorpágina 137 / 274próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.