Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

8.970 exploits

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware20 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

VulnCheck XDB

infoleak

CVE-2023-40600MEDIUM20 nov 2023

WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

48RISCO

VulnCheck XDB

initial-access

CVE-2021-41773HIGHsob ataqueransomware20 nov 2023

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware18 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

VulnCheck XDB

initial-access

CVE-2022-44877CRITICALsob ataque18 nov 2023

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execut

100RISCO

VulnCheck XDB

infoleak

CVE-2023-2982CRITICAL18 nov 2023

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

75RISCO

VulnCheck XDB

initial-access

CVE-2023-47246CRITICALsob ataqueransomware17 nov 2023

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f

100RISCO

VulnCheck XDB

initial-access

CVE-2023-20198CRITICALsob ataque16 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

VulnCheck XDB

initial-access

CVE-2022-29464CRITICALsob ataqueransomware16 nov 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISCO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware15 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

VulnCheck XDB

client-side

CVE-2023-38831HIGHsob ataqueransomware15 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

VulnCheck XDB

initial-access

CVE-2021-44026CRITICALsob ataque14 nov 2023

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

90RISCO

VulnCheck XDB

client-side

CVE-2023-41064HIGHsob ataque13 nov 2023

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1

83RISCO

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALsob ataqueransomware13 nov 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

VulnCheck XDB

initial-access

CVE-2023-50917—13 nov 2023

MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE:

50RISCO

VulnCheck XDB

initial-access

CVE-2022-22965CRITICALsob ataque12 nov 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

VulnCheck XDB

local

CVE-2021-4034HIGHsob ataqueransomware12 nov 2023

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALsob ataqueransomware12 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

VulnCheck XDB

initial-access

CVE-2019-2725HIGHsob ataqueransomware11 nov 2023

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISCO

VulnCheck XDB

local

CVE-2023-2640HIGH11 nov 2023

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay

61RISCO

VulnCheck XDB

local

CVE-2023-32629HIGH11 nov 2023

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks

61RISCO

VulnCheck XDB

denial-of-service

CVE-2023-44487HIGHsob ataque10 nov 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RISCO

VulnCheck XDB

initial-access

CVE-2022-24706CRITICALsob ataque10 nov 2023

Remote Code Execution Vulnerability in Packaging

100RISCO

VulnCheck XDB

initial-access

CVE-2019-15107CRITICALsob ataqueransomware09 nov 2023

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

VulnCheck XDB

initial-access

CVE-2023-38408CRITICAL09 nov 2023

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

70RISCO

VulnCheck XDB

initial-access

CVE-2019-9978MEDIUMsob ataque09 nov 2023

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio

100RISCO

VulnCheck XDB

local

CVE-2023-32629HIGH09 nov 2023

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks

61RISCO

VulnCheck XDB

initial-access

CVE-2023-22518CRITICALsob ataqueransomware09 nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISCO

VulnCheck XDB

initial-access

CVE-2019-15107CRITICALsob ataqueransomware09 nov 2023

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

VulnCheck XDB

initial-access

CVE-2020-14882CRITICALsob ataque09 nov 2023

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.