Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

72.018exploits catalogados

32.219CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8195Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

13.334 exploits

GitHub PoC

Repository for internship test task.

CVE-2024-25600CRITICAL26 ene 2025

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2016-2555 Exploit

CVE-2016-2555—26 ene 2025

SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbi

60RIESGO

abrir ↗

GitHub PoC★ 4

Exploit for WordPress File Upload Plugin - All versions up to 4.24.11 are vulnerable.

CVE-2024-9047CRITICAL25 ene 2025

WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

85RIESGO

abrir ↗

GitHub PoC★ 8

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy may allow a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

CVE-2024-55591CRITICALbajo ataqueransomware24 ene 2025

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro

100RIESGO

abrir ↗

GitHub PoC★ 1

Exploit for CVE-2023-4220

CVE-2023-4220HIGH24 ene 2025

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2024-3673 Exploit: Local File Inclusion in Web Directory Free WordPress Plugin ( before 1.7.3 )

CVE-2024-3673CRITICAL24 ene 2025

Web Directory Free < 1.7.3 - Unauthenticated LFI

63RIESGO

abrir ↗

GitHub PoC

This repository contains informaion about the Fortigate firewall vulnerability (CVE-2022-40684) and affected data that were publicly disclosed by the Belsen Group. This information is being shared for security research and defensive purposes to help organizations identify if they were impacted.

CVE-2022-40684CRITICALbajo ataqueransomware24 ene 2025

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RIESGO

abrir ↗

GitHub PoC

CVE-2017-7921 exploit. Allows admin password retrieval and automatic snapshot download.

CVE-2017-7921CRITICALbajo ataque24 ene 2025

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

abrir ↗

GitHub PoC★ 1

Proof of Concept for CVE-2024-45337 against Gitea and Forgejo

CVE-2024-45337CRITICAL24 ene 2025

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

48RIESGO

abrir ↗

GitHub PoC★ 1

Course Booking System <= 6.0.5 - Unauthenticated SQL Injection

CVE-2025-22785CRITICAL23 ene 2025

WordPress Course Booking System plugin <= 6.0.6 - SQL Injection vulnerability

63RIESGO

abrir ↗

GitHub PoC★ 1

XalfiE/Fortigate-Belsen-Leak-Dump-CVE-2022-40684-

CVE-2022-40684CRITICALbajo ataqueransomware23 ene 2025

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RIESGO

abrir ↗

GitHub PoC

CVE-2024-38077-POC

CVE-2024-38077CRITICAL23 ene 2025

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 2

ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is especially effective when the /uploads directory is either unprotected or missing on the target server.

CVE-2024-50379CRITICAL23 ene 2025

Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

60RIESGO

abrir ↗

GitHub PoC★ 155

This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.

CVE-2025-0411HIGHbajo ataque22 ene 2025

7-Zip Mark-of-the-Web Bypass Vulnerability

83RIESGO

abrir ↗

GitHub PoC★ 3

sysirq/fortios-auth-bypass-exploit-CVE-2024-55591

CVE-2024-55591CRITICALbajo ataqueransomware22 ene 2025

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro

100RIESGO

abrir ↗

GitHub PoC

备份的CVE

CVE-2024-6460CRITICAL22 ene 2025

Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI

63RIESGO

abrir ↗

GitHub PoC

Exploit for CVE-2024-53704 - SonicWall SonicOS SSLVPN authentication bypass

CVE-2024-53704HIGHbajo ataqueransomware22 ene 2025

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authe

100RIESGO

abrir ↗

GitHub PoC

In this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution (RCE) attack on a vulnerable TeamCity server.

CVE-2024-27198CRITICALbajo ataqueransomware22 ene 2025

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

100RIESGO

abrir ↗

GitHub PoC

Check Point Security Gateways RCE via CVE-2021-40438

CVE-2021-40438CRITICALbajo ataqueransomware22 ene 2025

mod_proxy SSRF

100RIESGO

abrir ↗

GitHub PoC★ 2

Exploit for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways

CVE-2025-0282CRITICALbajo ataqueransomware22 ene 2025

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

100RIESGO

abrir ↗

GitHub PoC

ekcrsm/CVE-2024-23733

CVE-2024-23733HIGH21 ene 2025

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core

41RIESGO

abrir ↗

GitHub PoC★ 26

sysirq/fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591CRITICALbajo ataqueransomware21 ene 2025

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thro

100RIESGO

abrir ↗

GitHub PoC

Grow by Tradedoubler < 2.0.22 - Unauthenticated LFI

CVE-2024-6460CRITICAL21 ene 2025

Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI

63RIESGO

abrir ↗

GitHub PoC★ 8

This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework. (https://github.com/HavocFramework/Havoc)

CVE-2024-41570CRITICAL21 ene 2025

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send

48RIESGO

abrir ↗

GitHub PoC★ 4

themirze/cve-2024-12084

CVE-2024-12084CRITICAL21 ene 2025

Rsync: heap buffer overflow in rsync due to improper checksum length handling

70RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-0847

CVE-2022-0847HIGHbajo ataque21 ene 2025

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 12

Automated Reverse Shell Exploit via WebSocket | Havoc-C2-SSRF with RCE

CVE-2024-41570CRITICAL21 ene 2025

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send

48RIESGO

abrir ↗

GitHub PoC

bananoname/CVE-2024-49138-POC

CVE-2024-49138HIGHbajo ataque21 ene 2025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC★ 2

POC for CVE-2023-40028: Ghost CMS Arbitrary File Read

CVE-2023-40028MEDIUM20 ene 2025

Arbitrary file read via symlinks in Ghost

45RIESGO

abrir ↗

GitHub PoC

调试环境

CVE-2021-44228CRITICALbajo ataqueransomware20 ene 2025

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.