Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

8.970 exploits

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware16 dez 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALsob ataqueransomware16 dez 2023

Unauthenticated sensitive information disclosure

100RISCO

VulnCheck XDB

initial-access

CVE-2017-1000486CRITICALsob ataque15 dez 2023

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RISCO

VulnCheck XDB

initial-access

CVE-2023-32315HIGHsob ataque15 dez 2023

Openfire administration console authentication bypass

100RISCO

VulnCheck XDB

initial-access

CVE-2023-50164—15 dez 2023

Apache Struts: File upload component had a directory traversal vulnerability

45RISCO

VulnCheck XDB

local

CVE-2016-5195HIGHsob ataque15 dez 2023

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

VulnCheck XDB

initial-access

CVE-2023-49070—14 dez 2023

Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present

60RISCO

VulnCheck XDB

local

CVE-2023-2640HIGH13 dez 2023

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay

61RISCO

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMsob ataque13 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

VulnCheck XDB

initial-access

CVE-2023-6553CRITICAL13 dez 2023

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

85RISCO

VulnCheck XDB

local

CVE-2023-32629HIGH13 dez 2023

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks

61RISCO

VulnCheck XDB

local

CVE-2020-1472MEDIUMsob ataqueransomware12 dez 2023

Netlogon Elevation of Privilege Vulnerability

100RISCO

VulnCheck XDB

client-side

CVE-2023-38831HIGHsob ataqueransomware12 dez 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

VulnCheck XDB

infoleak

CVE-2021-40438CRITICALsob ataqueransomware12 dez 2023

mod_proxy SSRF

100RISCO

VulnCheck XDB

initial-access

CVE-2019-15107CRITICALsob ataqueransomware12 dez 2023

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMsob ataque11 dez 2023

[20230201] - Core - Improper access check in webservice endpoints

100RISCO

VulnCheck XDB

denial-of-service

CVE-2023-44487HIGHsob ataque11 dez 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RISCO

VulnCheck XDB

initial-access

CVE-2023-20198CRITICALsob ataque11 dez 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

VulnCheck XDB

local

CVE-2021-3560HIGHsob ataque11 dez 2023

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISCO

VulnCheck XDB

local

CVE-2023-4911HIGHsob ataque10 dez 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RISCO

VulnCheck XDB

initial-access

CVE-2023-38646—10 dez 2023

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman

60RISCO

VulnCheck XDB

client-side

CVE-2020-0674HIGHsob ataque10 dez 2023

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

93RISCO

VulnCheck XDB

denial-of-service

CVE-2022-21907CRITICAL09 dez 2023

HTTP Protocol Stack Remote Code Execution Vulnerability

70RISCO

VulnCheck XDB

initial-access

CVE-2023-20273HIGHsob ataque09 dez 2023

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject c

100RISCO

VulnCheck XDB

local

CVE-2023-36874HIGHsob ataque09 dez 2023

Windows Error Reporting Service Elevation of Privilege Vulnerability

98RISCO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware09 dez 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

VulnCheck XDB

local

CVE-2019-6693MEDIUMsob ataqueransomware08 dez 2023

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RISCO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware07 dez 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

VulnCheck XDB

infoleak

CVE-2017-1000028—07 dez 2023

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RISCO

VulnCheck XDB

initial-access

CVE-2023-28432HIGHsob ataque07 dez 2023

Minio Information Disclosure in Cluster Deployment

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.