Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.016exploits catalogados

32.219CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.332VulnCheck XDB 8.195Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

4.217 exploits

Nucleimedium

ChurchCRM 4.5.3 - Cross-Site Scripting

CVE-2023-25346MEDIUM

A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web

28RISCO

abrir ↗

Nucleihigh

Metersphere - Arbitrary File Read

CVE-2023-25573HIGH

Improper access control to download file in metersphere

48RISCO

abrir ↗

Nucleicritical

Ruckus Wireless Admin - Remote Code Execution

CVE-2023-25717CRITICALsob ataque

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated

95RISCO

abrir ↗

Nucleicritical

ZoneMinder Snapshots - Command Injection

CVE-2023-26035HIGH

ZoneMinder vulnerable to Missing Authorization

58RISCO

abrir ↗

Nucleihigh

Lexmark Printers - Command Injection

CVE-2023-26067HIGH

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

68RISCO

abrir ↗

Nucleimedium

KiviCare WordPress Plugin - Cross-Site Scripting

CVE-2023-2624—

KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting

18RISCO

abrir ↗

Nucleihigh

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

CVE-2023-26255HIGH

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2

68RISCO

abrir ↗

Nucleihigh

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

CVE-2023-26256HIGH

An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2

61RISCO

abrir ↗

Nucleicritical

Arcserve UDP <= 9.0.6034 - Authentication Bypass

CVE-2023-26258—

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashSe

50RISCO

abrir ↗

Nucleihigh

Adobe Coldfusion - Authentication Bypass

CVE-2023-26347HIGH

CVE-2023-38205 issues | ColdFusion Admin Panel Access

41RISCO

abrir ↗

Nucleihigh

Adobe ColdFusion - Local File Read

CVE-2023-26360HIGHsob ataque

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RISCO

abrir ↗

Nucleicritical

Jorani 1.0.0 - Remote Code Execution

CVE-2023-26469—

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.

60RISCO

abrir ↗

Nucleicritical

Weaver E-Office 9.5 - Remote Code Execution

CVE-2023-2648MEDIUM

Weaver E-Office uploadify.php unrestricted upload

33RISCO

abrir ↗

Nucleicritical

DCBI-Netlog-LAB v1.0 - Command Injection

CVE-2023-26802CRITICAL

An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attac

55RISCO

abrir ↗

Nucleimedium

ChurchCRM 4.5.3 - Cross-Site Scripting

CVE-2023-26842MEDIUM

A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web scr

28RISCO

abrir ↗

Nucleihigh

ManageEngine ADManager Plus - Command Injection

CVE-2023-29084HIGH

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy setti

58RISCO

abrir ↗

Nucleimedium

XWiki - Open Redirect

CVE-2023-29204MEDIUM

URL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore

28RISCO

abrir ↗

Nucleihigh

Adobe ColdFusion - Access Control Bypass

CVE-2023-29298HIGHsob ataque

Adobe ColdFusion Improper Access Control Security feature bypass

88RISCO

abrir ↗

Nucleicritical

Adobe ColdFusion - Pre-Auth Remote Code Execution

CVE-2023-29300CRITICALsob ataqueransomware

Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

95RISCO

abrir ↗

Nucleicritical

Microsoft SharePoint - Authentication Bypass

CVE-2023-29357CRITICALsob ataqueransomware

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Nucleimedium

FooGallery plugin <= 2.2.35 - Cross-Site Scripting

CVE-2023-29439HIGH

WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)

36RISCO

abrir ↗

Nucleimedium

OpenEMR < 7.0.1 - Cross-Site Scripting

CVE-2023-2948HIGH

Cross-site Scripting (XSS) - Generic in openemr/openemr

58RISCO

abrir ↗

Nucleimedium

cPanel < 11.109.9999.116 - Cross-Site Scripting

CVE-2023-29489MEDIUM

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall

40RISCO

abrir ↗

Nucleimedium

OpenEMR < 7.0.1 - Cross-site Scripting

CVE-2023-2949HIGH

Cross-site Scripting (XSS) - Reflected in openemr/openemr

36RISCO

abrir ↗

Nucleimedium

XWiki >= 13.10.8 - Cross-Site Scripting

CVE-2023-29506MEDIUM

org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticated endpoints

28RISCO

abrir ↗

Nucleimedium

Purchase Order Management v1.0 - Cross Site Scripting (Reflected)

CVE-2023-29623MEDIUM

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the pa

28RISCO

abrir ↗

Nucleicritical

Miniorange Social Login and Register <= 7.6.3 - Authentication Bypass

CVE-2023-2982CRITICAL

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

75RISCO

abrir ↗

Nucleicritical

Embedded JavaScript(EJS) 3.1.6 - Template Injection

CVE-2023-29827CRITICAL

ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be i

43RISCO

abrir ↗

Nucleihigh

Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion

CVE-2023-29887HIGH

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitra

36RISCO

abrir ↗

Nucleicritical

SolarView Compact <= 6.00 - Local File Inclusion

CVE-2023-29919CRITICAL

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because t

75RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.