Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados
37.029CVEs com exploração pública
24.695testados em laboratório
8.970 exploits
VulnCheck XDB
client-side
CVE-2023-41993HIGHsob ataque15 out 2023
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to
76RISCO
abrir
VulnCheck XDB
local
CVE-2023-4911HIGHsob ataque14 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864614 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware13 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware13 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-3156HIGHsob ataque13 out 2023
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque13 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
local
CVE-2021-3493HIGHsob ataque13 out 2023
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-29441HIGH12 out 2023
Authentication bypass
78RISCO
abrir
VulnCheck XDB
client-side
CVE-2023-38831HIGHsob ataqueransomware12 out 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864612 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-27997CRITICALsob ataqueransomware12 out 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware12 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864612 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-27997CRITICALsob ataqueransomware12 out 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque12 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque12 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque11 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-2215MEDIUM11 out 2023
Campcodes Coffee Shop POS System manage_user.php sql injection
33RISCO
abrir
VulnCheck XDB
local
CVE-2023-4911HIGHsob ataque11 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware11 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware11 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864611 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864611 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware10 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-27524HIGHsob ataque10 out 2023
Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALsob ataqueransomware10 out 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-3864610 out 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
abrir
VulnCheck XDB
local
CVE-2023-4911HIGHsob ataque10 out 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque10 out 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
anteriorpágina 173 / 299próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.