Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
22.266 exploits
Referência
CVE-2022-47636
CVE-2022-47636—
A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open
23RISCO
abrir ↗
Referência
CVE-2022-47874
CVE-2022-47874MEDIUM
Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of dat
38RISCO
abrir ↗
Referência
CVE-2022-47875
CVE-2022-47875HIGH
A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to ex
46RISCO
abrir ↗
Referência
CVE-2022-47876
CVE-2022-47876CRITICAL
The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code v
48RISCO
abrir ↗
Referência
CVE-2022-47986
CVE-2022-47986CRITICALsob ataqueransomware
IBM Aspera Faspex code execution
100RISCO
abrir ↗
Referência
CVE-2022-48110
CVE-2022-48110MEDIUM
CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CK
33RISCO
abrir ↗
Referência
CVE-2022-48177
CVE-2022-48177MEDIUM
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability v
33RISCO
abrir ↗
Referência
CVE-2022-48178
CVE-2022-48178MEDIUM
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via
33RISCO
abrir ↗
Referência
CVE-2017-6998
CVE-2017-6998—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RISCO
abrir ↗
Referência
CVE-2017-7237
CVE-2017-7237—
The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spicewor
23RISCO
abrir ↗
Referência
CVE-2023-0915
CVE-2023-0915MEDIUM
SourceCodester Auto Dealer Management System sql injection
33RISCO
abrir ↗
Referência
CVE-2023-0938
CVE-2023-0938MEDIUM
SourceCodester Music Gallery Site GET Request music_list.php sql injection
33RISCO
abrir ↗
Referência
CVE-2023-0961
CVE-2023-0961MEDIUM
SourceCodester Music Gallery Site GET Request view_music_details.php sql injection
33RISCO
abrir ↗
Referência
CVE-2023-0962
CVE-2023-0962MEDIUM
SourceCodester Music Gallery Site GET Request Master.php sql injection
33RISCO
abrir ↗
Referência
CVE-2023-1258
CVE-2023-1258MEDIUM
Flow-X disclosure of sensitive information to unauthenticated users
33RISCO
abrir ↗
Referência
Kardex Mlog MCC 5.7.12 - RCE (Remote Code Execution)
CVE-2023-22855CRITICALremotewindows
Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 808
53RISCO
abrir ↗
Referência
CVE-2023-23162
CVE-2023-23162—
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter
23RISCO
abrir ↗
Referência
CVE-2023-23333
CVE-2023-23333CRITICAL
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassin
85RISCO
abrir ↗
Referência
CVE-2017-7643
CVE-2017-7643—
Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid progra
23RISCO
abrir ↗
Referência
CVE-2023-23956
CVE-2023-23956MEDIUM
A user can supply malicious HTML and JavaScript code that will be executed in the client browser
33RISCO
abrir ↗
Referência
GNU screen v4.9.0 - Privilege Escalation
CVE-2023-24626MEDIUMlocallinux
socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and F
33RISCO
abrir ↗
Referência
CVE-2023-24788
CVE-2023-24788—
NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/s
23RISCO
abrir ↗
Referência
CVE-2023-25440
CVE-2023-25440MEDIUM
Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to exe
33RISCO
abrir ↗
Referência
CVE-2023-27350
CVE-2023-27350CRITICALsob ataqueransomware
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir ↗
Referência
CVE-2017-8473
CVE-2017-8473—
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, an
23RISCO
abrir ↗
Referência
CVE-2017-8478
CVE-2017-8478—
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,
23RISCO
abrir ↗
Referência
CVE-2023-27372
CVE-2023-27372CRITICAL
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗
Referência
CVE-2023-27372
CVE-2023-27372CRITICAL
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗
Referência
CVE-2023-27372
CVE-2023-27372CRITICAL
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗
Referência
CVE-2023-27372
CVE-2023-27372CRITICAL
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir ↗
← anteriorpágina 421 / 743próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.