Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.324exploits catalogados
37.130CVEs com exploração pública
24.695testados em laboratório
9.001 exploits
VulnCheck XDB
initial-access
CVE-2019-1949223 mai 2023
FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.
43RISCO
abrir
VulnCheck XDB
local
CVE-2023-32784HIGH23 mai 2023
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work
41RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-1949223 mai 2023
FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.
43RISCO
abrir
VulnCheck XDB
local
CVE-2023-32784HIGH22 mai 2023
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work
41RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-4288922 mai 2023
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-25690CRITICAL22 mai 2023
Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy
70RISCO
abrir
VulnCheck XDB
local
CVE-2021-3493HIGHsob ataque21 mai 2023
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-0297CRITICAL21 mai 2023
Code Injection in pyload/pyload
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-46169CRITICALsob ataque21 mai 2023
Unauthenticated Command Injection
100RISCO
abrir
VulnCheck XDB
local
CVE-2023-32784HIGH20 mai 2023
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work
41RISCO
abrir
VulnCheck XDB
local
CVE-2019-573620 mai 2023
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b
60RISCO
abrir
VulnCheck XDB
infoleak
CVE-2022-24716HIGH20 mai 2023
Path traversal in Icinga Web 2
78RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-29919CRITICAL19 mai 2023
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because t
75RISCO
abrir
VulnCheck XDB
local
CVE-2023-32784HIGH17 mai 2023
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work
41RISCO
abrir
VulnCheck XDB
local
CVE-2022-3699HIGH17 mai 2023
A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo
56RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-1671CRITICALsob ataque17 mai 2023
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2017-1315616 mai 2023
An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,
43RISCO
abrir
VulnCheck XDB
local
CVE-2023-32233HIGH16 mai 2023
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused
46RISCO
abrir
VulnCheck XDB
local
CVE-2023-0386HIGHsob ataque16 mai 2023
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa
86RISCO
abrir
VulnCheck XDB
local
CVE-2023-32233HIGH16 mai 2023
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused
46RISCO
abrir
VulnCheck XDB
local
CVE-2023-32233HIGH16 mai 2023
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused
46RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-25194HIGH15 mai 2023
Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect
78RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-32243CRITICAL15 mai 2023
WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation
85RISCO
abrir
VulnCheck XDB
local
CVE-2023-28206HIGHsob ataque15 mai 2023
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5,
76RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-32243CRITICAL14 mai 2023
WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation
85RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-22204MEDIUMsob ataque14 mai 2023
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RISCO
abrir
VulnCheck XDB
local
CVE-2022-24481HIGH14 mai 2023
Windows Common Log File System Driver Elevation of Privilege Vulnerability
46RISCO
abrir
VulnCheck XDB
local
CVE-2021-3156HIGHsob ataque14 mai 2023
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-1144714 mai 2023
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RISCO
abrir
VulnCheck XDB
client-side
CVE-2022-30190HIGHsob ataqueransomware14 mai 2023
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
anteriorpágina 189 / 301próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.