Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.206exploits catalogados

35.418CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.124VulnCheck XDB 8.617Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

77.151 exploits

VulnCheck XDB

remote-with-credentials

CVE-2020-13942—20 dez 2023

Remote Code Execution in Apache Unomi

50RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMsob ataque20 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-24488MEDIUM20 dez 2023

Cross site scripting

70RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2010-0738MEDIUMsob ataqueransomware20 dez 2023

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMsob ataque20 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-23397CRITICALsob ataque20 dez 2023

Microsoft Outlook Elevation of Privilege Vulnerability

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMsob ataque20 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-3519CRITICALsob ataqueransomware20 dez 2023

Unauthenticated remote code execution

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2023-24055—20 dez 2023

KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file,

23RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-26134CRITICALsob ataqueransomware20 dez 2023

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-1472MEDIUMsob ataqueransomware20 dez 2023

Netlogon Elevation of Privilege Vulnerability

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMsob ataque20 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22965CRITICALsob ataque20 dez 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-32235HIGH20 dez 2023

Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2

68RISCO

abrir ↗

Metasploit600

Cacti RCE via SQLi in pollers.php

CVE-2023-49084HIGH20 dez 2023

Local File Inclusion (RCE) in Cacti

48RISCO

abrir ↗

Metasploit600

Cacti RCE via SQLi in pollers.php

CVE-2023-49085HIGH20 dez 2023

Cacti SQL Injection vulnerability

58RISCO

abrir ↗

GitHub PoC

OwnCloud CVE-2023-49103

CVE-2023-49103CRITICALsob ataque19 dez 2023

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies

100RISCO

abrir ↗

GitHub PoC

Binaries for "CVE-2023-23752"

CVE-2023-23752MEDIUMsob ataque19 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

GitHub PoC★ 25

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

CVE-2023-4863HIGHsob ataque19 dez 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMsob ataque19 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-4863HIGHsob ataque19 dez 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMsob ataque18 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

GitHub PoC★ 1

Arszilla/CVE-2023-6538

CVE-2023-6538HIGH18 dez 2023

System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.

41RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-11651CRITICALsob ataque18 dez 2023

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

abrir ↗

GitHub PoC

An implementation of a proof-of-concept for CVE-2018-5767

CVE-2018-5767—18 dez 2023

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code

35RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-12124—18 dez 2023

A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.1

60RISCO

abrir ↗

GitHub PoC

An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints within Joomla! CMS versions 4.0.0 through 4.2.7. This vulnerability could be exploited by attackers to gain unauthorized access to sensitive information or perform unauthorized actions.

CVE-2023-23752MEDIUMsob ataque18 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

abrir ↗

GitHub PoC

Repository that contains a CVE-2020-11651 Exploit updated to work with the latest versions of python.

CVE-2020-11651CRITICALsob ataque18 dez 2023

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

abrir ↗

GitHub PoC

jee web project with log4shell (CVE-2021-44228) vulnerability

CVE-2021-44228CRITICALsob ataqueransomware18 dez 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

abrir ↗

GitHub PoC★ 54

LiveOverflow/webp-CVE-2023-4863

CVE-2023-4863HIGHsob ataque18 dez 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.