Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.991exploits catalogados
32.218CVEs com exploração pública
1.932testados em laboratório
8.182 exploits
VulnCheck XDB
client-side
CVE-2023-38831HIGHsob ataqueransomware12 out 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-29441HIGH12 out 2023
Authentication bypass
78RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque12 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque12 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-27997CRITICALsob ataqueransomware12 out 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-27997CRITICALsob ataqueransomware12 out 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864612 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864612 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque11 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
local
CVE-2023-4911HIGHsob ataque11 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-2215MEDIUM11 out 2023
Campcodes Coffee Shop POS System manage_user.php sql injection
33RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware11 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864611 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware11 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864611 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware10 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque10 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware10 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864610 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-3758010 out 2023
Apache ShenYu Admin bypass JWT authentication
50RISCO
abrir
VulnCheck XDB
local
CVE-2023-4911HIGHsob ataque10 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
VulnCheck XDB
local
CVE-2023-4911HIGHsob ataque10 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-27524HIGHsob ataque10 out 2023
Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864609 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
local
CVE-2023-36802HIGHsob ataque09 out 2023
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
76RISCO
abrir
VulnCheck XDB
initial-access
CVE-2018-1066109 out 2023
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-1212409 out 2023
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.1
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864608 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864608 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
local
CVE-2023-4911HIGHsob ataque08 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
anteriorpágina 148 / 273próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.