Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

4.361 exploits

Nucleicritical

TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection

CVE-2023-1389HIGHsob ataque

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RISCO

abrir ↗

Nucleihigh

Video List Manager <= 1.7 - SQL Injection

CVE-2023-1408HIGH

Video List Manager <= 1.7 - Admin+ SQL Injection

36RISCO

abrir ↗

Nucleicritical

Jeecg-boot 3.5.0 qurestSql - SQL Injection

CVE-2023-1454MEDIUM

jeecg-boot qurestSql sql injection

60RISCO

abrir ↗

Nucleimedium

Imgproxy < 3.14.0 - Cross-site Scripting (XSS)

CVE-2023-1496MEDIUM

Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy

28RISCO

abrir ↗

Nucleimedium

MyCryptoCheckout < 2.124 - Cross-Site Scripting

CVE-2023-1546MEDIUM

MyCryptoCheckout < 2.124 - Reflected XSS

28RISCO

abrir ↗

Nucleicritical

Sophos Web Appliance - Remote Code Execution

CVE-2023-1671CRITICALsob ataque

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10

100RISCO

abrir ↗

Nucleicritical

WAGO - Remote Command Execution

CVE-2023-1698CRITICAL

WAGO: WBM Command Injection in multiple products

85RISCO

abrir ↗

Nucleicritical

Bitrix Component - Cross-Site Scripting

CVE-2023-1719HIGH

Bitrix24 Insecure Global Variable Extraction

36RISCO

abrir ↗

Nucleicritical

SupportCandy < 3.1.5 - Unauthenticated SQL Injection

CVE-2023-1730CRITICAL

SupportCandy < 3.1.5 - Unauthenticated SQLi

75RISCO

abrir ↗

Nucleimedium

Companion Sitemap Generator < 4.5.3 - Cross-Site Scripting

CVE-2023-1780—

Companion Sitemap Generator < 4.5.3 - Reflected XSS

18RISCO

abrir ↗

Nucleimedium

Ninja Forms < 3.6.22 - Cross-Site Scripting

CVE-2023-1835MEDIUM

Ninja Forms < 3.6.22 - Reflected XSS

28RISCO

abrir ↗

Nucleimedium

Phpmyfaq v3.1.11 - Cross-Site Scripting

CVE-2023-1880HIGH

Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

36RISCO

abrir ↗

Nucleimedium

Tablesome < 1.0.9 - Cross-Site Scripting

CVE-2023-1890MEDIUM

Tablesome < 1.0.9 - Reflected XSS

28RISCO

abrir ↗

Nucleicritical

Sidekiq < 7.0.8 - Cross-Site Scripting

CVE-2023-1892HIGH

Cross-site Scripting (XSS) - Reflected in sidekiq/sidekiq

36RISCO

abrir ↗

Nucleimedium

CVE-2023-1893—

18RISCO

abrir ↗

Nucleicritical

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

CVE-2023-20073MEDIUM

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability

70RISCO

abrir ↗

Nucleimedium

Pretty Url <= 1.5.4 - Cross-Site Scripting

CVE-2023-2009MEDIUM

Pretty Url <= 1.5.4 - Admin+ Stored XSS in plugin settings

28RISCO

abrir ↗

Nucleicritical

Cisco IOS XE Web UI - Command Injection

CVE-2023-20198CRITICALsob ataque

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

abrir ↗

Nucleimedium

Custom 404 Pro < 3.7.3 - Cross-Site Scripting

CVE-2023-2023MEDIUM

Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting

28RISCO

abrir ↗

Nucleimedium

DedeCMS 5.7.87 - Directory Traversal

CVE-2023-2059MEDIUM

DedeCMS select_templets.php path traversal

28RISCO

abrir ↗

Nucleimedium

Squidex <7.4.0 - Cross-Site Scripting

CVE-2023-24278MEDIUM

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.

28RISCO

abrir ↗

Nucleimedium

mojoPortal 2.7.0.0 - Cross-Site Scripting

CVE-2023-24322MEDIUM

A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows atta

40RISCO

abrir ↗

Nucleicritical

UserPro <= 5.1.1 - Authentication Bypass

CVE-2023-2437CRITICAL

UserPro <= 5.1.1 - Authentication Bypass to Administrator

63RISCO

abrir ↗

Nucleimedium

Citrix Gateway and Citrix ADC - Cross-Site Scripting

CVE-2023-24488MEDIUM

Cross site scripting

70RISCO

abrir ↗

Nucleicritical

Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution

CVE-2023-24489CRITICALsob ataque

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, coul

100RISCO

abrir ↗

Nucleimedium

phpIPAM - 1.6 - Cross-Site Scripting

CVE-2023-24657MEDIUM

phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter

48RISCO

abrir ↗

Nucleimedium

PMB 7.4.6 - Cross-Site Scripting

CVE-2023-24733—

PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /ad

18RISCO

abrir ↗

Nucleimedium

PMB 7.4.6 - Open Redirect

CVE-2023-24735—

PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerabil

18RISCO

abrir ↗

Nucleimedium

PMB v7.4.6 - Cross-Site Scripting

CVE-2023-24737—

PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /ad

18RISCO

abrir ↗

Nucleicritical

Appium Desktop Server - Remote Code Execution

CVE-2023-2479CRITICAL

OS Command Injection in appium/appium-desktop

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.