Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.095exploits catalogados
36.945CVEs com exploração pública
24.695testados em laboratório
8.970 exploits
VulnCheck XDB
client-side
CVE-2024-21413CRITICALsob ataque17 fev 2024
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-36845CRITICALsob ataque17 fev 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2024-21413CRITICALsob ataque16 fev 2024
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2017-10271HIGHsob ataqueransomware16 fev 2024
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2024-21413CRITICALsob ataque16 fev 2024
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-2725HIGHsob ataqueransomware16 fev 2024
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware16 fev 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2023-48777CRITICAL16 fev 2024
WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability
63RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware16 fev 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2024-21413CRITICALsob ataque15 fev 2024
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-4966CRITICALsob ataqueransomware15 fev 2024
Unauthenticated sensitive information disclosure
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-46604CRITICALsob ataqueransomware14 fev 2024
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-36845CRITICALsob ataque14 fev 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-36845CRITICALsob ataque13 fev 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2017-1000486CRITICALsob ataque13 fev 2024
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-36845CRITICALsob ataque13 fev 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-36846MEDIUMsob ataque13 fev 2024
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
85RISCO
abrir
VulnCheck XDB
local
CVE-2021-34527HIGHsob ataqueransomware12 fev 2024
Windows Print Spooler Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-1675HIGHsob ataqueransomware12 fev 2024
Windows Print Spooler Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-1675HIGHsob ataqueransomware12 fev 2024
Windows Print Spooler Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMsob ataqueransomware12 fev 2024
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-1781MEDIUM12 fev 2024
Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection
38RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-46747CRITICALsob ataqueransomware11 fev 2024
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALsob ataqueransomware11 fev 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2022-4262HIGHsob ataque11 fev 2024
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru
76RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2019-1144711 fev 2024
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISCO
abrir
VulnCheck XDB
initial-access
CVE-2018-999509 fev 2024
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-22024HIGH09 fev 2024
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Se
78RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2021-32789HIGH08 fev 2024
Arbitrary SQL (SQL injection) possible via the Store API component.
61RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-4288908 fev 2024
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISCO
abrir
anteriorpágina 154 / 299próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.