Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.041exploits catalogados
32.227CVEs com exploração pública
1.932testados em laboratório
8.195 exploits
VulnCheck XDB
initial-access
CVE-2022-21587CRITICALsob ataqueransomware03 mar 2023
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALsob ataque02 mar 2023
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2017-5638CRITICALsob ataqueransomware02 mar 2023
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2019-0708CRITICALsob ataqueransomware02 mar 2023
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2014-6271CRITICALsob ataque02 mar 2023
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-31814CRITICAL01 mar 2023
pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar
85RISCO
abrir
VulnCheck XDB
local
CVE-2022-46689HIGH01 mar 2023
A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macO
68RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-23752MEDIUMsob ataque01 mar 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-26256HIGH28 fev 2023
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2
61RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-0796CRITICALsob ataqueransomware28 fev 2023
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2022-138628 fev 2023
Fusion Builder < 3.6.2 - Unauthenticated SSRF
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-4288928 fev 2023
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-40684CRITICALsob ataqueransomware27 fev 2023
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-22205CRITICALsob ataqueransomware27 fev 2023
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-39952CRITICAL26 fev 2023
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8
85RISCO
abrir
VulnCheck XDB
local
CVE-2022-0847HIGHsob ataque26 fev 2023
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-40881CRITICAL25 fev 2023
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
68RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-23752MEDIUMsob ataque24 fev 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-23752MEDIUMsob ataque23 fev 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-23752MEDIUMsob ataque23 fev 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2022-42475CRITICALsob ataqueransomware23 fev 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-23752MEDIUMsob ataque23 fev 2023
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware22 fev 2023
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
VulnCheck XDB
local
CVE-2023-22809HIGH22 fev 2023
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
68RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-21587CRITICALsob ataqueransomware22 fev 2023
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-6340HIGHsob ataque22 fev 2023
Drupal core - Highly critical - Remote Code Execution
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-2725HIGHsob ataqueransomware22 fev 2023
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-39952CRITICAL22 fev 2023
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8
85RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2022-41082HIGHsob ataqueransomware21 fev 2023
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-21839HIGHsob ataque21 fev 2023
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISCO
abrir
anteriorpágina 170 / 274próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.