Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados
36.945CVEs com exploração pública
24.695testados em laboratório
8.970 exploits
VulnCheck XDB
initial-access
CVE-2022-46169CRITICALsob ataque28 mar 2024
Unauthenticated Command Injection
100RISCO
abrir
VulnCheck XDB
local
CVE-2023-28229HIGHsob ataque27 mar 2024
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
71RISCO
abrir
VulnCheck XDB
infoleak
CVE-2021-43798HIGHsob ataque27 mar 2024
Grafana path traversal
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware26 mar 2024
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHsob ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2023-38831HIGHsob ataqueransomware25 mar 2024
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-3560HIGHsob ataque24 mar 2024
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir
VulnCheck XDB
infoleak
CVE-2022-21661HIGH24 mar 2024
SQL injection in WordPress
78RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-4808423 mar 2024
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
50RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware23 mar 2024
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-1709CRITICALsob ataqueransomware22 mar 2024
Authentication bypass using an alternate path or channel
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-36424HIGHsob ataque21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir
VulnCheck XDB
local
CVE-2023-28252HIGHsob ataqueransomware21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
98RISCO
abrir
VulnCheck XDB
client-side
CVE-2023-23397CRITICALsob ataque20 mar 2024
Microsoft Outlook Elevation of Privilege Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-1212CRITICALsob ataque19 mar 2024
LoadMaster Pre-Authenticated OS Command Injection
100RISCO
abrir
VulnCheck XDB
local
CVE-2023-32629HIGH19 mar 2024
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks
61RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-23334MEDIUM19 mar 2024
aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal
70RISCO
abrir
VulnCheck XDB
local
CVE-2023-2640HIGH19 mar 2024
On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay
61RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-21974HIGH19 mar 2024
OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG
53RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-1071CRITICAL18 mar 2024
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-48788CRITICALsob ataqueransomware18 mar 2024
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versio
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2017-12617HIGHsob ataque18 mar 2024
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-43208CRITICALsob ataqueransomware17 mar 2024
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-21762CRITICALsob ataqueransomware17 mar 2024
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-43208CRITICALsob ataqueransomware15 mar 2024
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2021-44228CRITICALsob ataqueransomware15 mar 2024
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
VulnCheck XDB
local
CVE-2024-21626HIGH15 mar 2024
runc container breakout through process.cwd trickery and leaked fds
61RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-33246CRITICALsob ataque14 mar 2024
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RISCO
abrir
anteriorpágina 151 / 299próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.