Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

82.117exploits catalogados
38.374CVEs com exploração pública
24.695testados em laboratório
82.117 exploits
VulnCheck XDB
initial-access
CVE-2022-36267—08 jan 2024
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerabilit
35RISCO
abrir ↗
VulnCheck XDB
local
CVE-2016-3309HIGHsob ataqueransomware08 jan 2024
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;
76RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2015-2208—08 jan 2024
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via she
50RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2015-1427CRITICALsob ataque08 jan 2024
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-3156HIGHsob ataque08 jan 2024
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2014-6271CRITICALsob ataque08 jan 2024
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-49070—08 jan 2024
Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present
60RISCO
abrir ↗
VulnCheck XDB
local
CVE-2016-8869—08 jan 2024
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before
60RISCO
abrir ↗
VulnCheck XDB
local
CVE-2016-8870—08 jan 2024
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before
60RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-22600MEDIUMsob ataque08 jan 2024
Double Free in net/packet/af_packet.c leading to priviledge escalation
63RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2023-51467—08 jan 2024
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-8917—08 jan 2024
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2023-28432HIGHsob ataque07 jan 2024
Minio Information Disclosure in Cluster Deployment
100RISCO
abrir ↗
GitHub PoC
johnossawy/CVE-2023-42793_POC
CVE-2023-42793CRITICALsob ataqueransomware07 jan 2024
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISCO
abrir ↗
GitHub PoC
MS-NRPC (Microsoft NetLogon Remote Protocol)/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware07 jan 2024
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMsob ataqueransomware07 jan 2024
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-52251HIGH06 jan 2024
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the
78RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2023-27163MEDIUM06 jan 2024
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RISCO
abrir ↗
GitHub PoC
Local Privilege Escalation (LPE) vulnerability in Polkit - Pwnkit
CVE-2021-4034HIGHsob ataqueransomware06 jan 2024
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-31446CRITICAL06 jan 2024
In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config
75RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware06 jan 2024
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware04 jan 2024
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC
Clone from gist
CVE-2021-26855CRITICALsob ataqueransomware04 jan 2024
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
julienbrs/exploit-CVE-2023-3460
CVE-2023-3460—04 jan 2024
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALsob ataqueransomware04 jan 2024
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 1
touch 生成文件
CVE-2021-4034HIGHsob ataqueransomware04 jan 2024
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC
Script to validate WordPress CVE-2022-21661
CVE-2022-21661HIGH04 jan 2024
SQL injection in WordPress
78RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2023-51467—04 jan 2024
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISCO
abrir ↗
VulnCheck XDB
local
CVE-2023-49070—04 jan 2024
Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present
60RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-3460—04 jan 2024
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISCO
abrir ↗
← anteriorpágina 505 / 2.738próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.