Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados

34.432CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

13.627 exploits

GitHub PoC

bryanqb07/CVE-2023-32315

CVE-2023-32315HIGHbajo ataque05 sep 2024

Openfire administration console authentication bypass

100RIESGO

abrir ↗

GitHub PoC★ 1

This repository provides a PoC for CVE-2017-5638, a remote code execution vulnerability in Apache Struts 2, exploitable via a crafted Content-Type HTTP header.

CVE-2017-5638CRITICALbajo ataqueransomware04 sep 2024

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

abrir ↗

GitHub PoC★ 4

Masamuneee/CVE-2024-4367-Analysis

CVE-2024-4367MEDIUM04 sep 2024

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RIESGO

abrir ↗

GitHub PoC★ 1

brownpanda29/Cve-2024-38063

CVE-2024-38063CRITICAL03 sep 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 3

Authenticated Code execution

CVE-2023-26785CRITICAL03 sep 2024

MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File

48RIESGO

abrir ↗

GitHub PoC★ 1

(CVE-2023-4220) Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

CVE-2023-4220HIGH03 sep 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

abrir ↗

GitHub PoC★ 1

Adobe ColdFusion CVE-2023-26360/CVE-2023-29298 自动化实现反弹

CVE-2023-26360HIGHbajo ataque03 sep 2024

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RIESGO

abrir ↗

GitHub PoC★ 1

Raffli-Dev/CVE-2023-41425

CVE-2023-41425MEDIUM03 sep 2024

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code

60RIESGO

abrir ↗

GitHub PoC

ImageMagick 7.1.0-49 vulnerable to Information Disclosure

CVE-2022-44268MEDIUM02 sep 2024

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

GitHub PoC

ps-interactive/cve-2024-38063

CVE-2024-38063CRITICAL02 sep 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 8

This module exploits a vulnerability in the target service identified as CVE-2023-42115.

CVE-2023-42115CRITICAL02 sep 2024

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

48RIESGO

abrir ↗

GitHub PoC★ 9

Unauthenticated Remote Code Execution in SPIP versions up to and including 4.2.12

CVE-2024-7954CRITICAL01 sep 2024

SPIP porte_plume Plugin Arbitrary PHP Execution

85RIESGO

abrir ↗

GitHub PoC

Yowise/CVE-2022-26923

CVE-2022-26923HIGHbajo ataque01 sep 2024

Active Directory Domain Services Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 9

This is a C language program designed to test the Windows TCP/IP Remote Code Execution Vulnerability (CVE-2024-38063). It sends specially crafted IPv6 packets with embedded shellcode to exploit the vulnerability.

CVE-2024-38063CRITICAL01 sep 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 30

poc code for CVE-2024-38080

CVE-2024-38080HIGHbajo ataque01 sep 2024

Windows Hyper-V Elevation of Privilege Vulnerability

71RIESGO

abrir ↗

GitHub PoC★ 43

CVE-2024-38063 is a critical security vulnerability in the Windows TCP/IP stack that allows for remote code execution (RCE)

CVE-2024-38063CRITICAL31 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 25

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC

CVE-2024-21413CRITICALbajo ataque31 ago 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 11

POC for CVE-2023-29360

CVE-2023-29360HIGHbajo ataque31 ago 2024

Microsoft Streaming Service Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC

🔍 Just wrapped up an incident report on a Phishing Alert (Event ID 257, SOC282). Enhancing my expertise in email threat detection and response! 🚨 #Cybersecurity #SOCAnalyst #LetsDefend

CVE-2024-24919HIGHbajo ataqueransomware31 ago 2024

Information disclosure

100RIESGO

abrir ↗

GitHub PoC

Proof of Concept Exploit for CVE-2024-44812 - SQL Injection Authentication Bypass vulnerability in Online Complaint Site v1.0

CVE-2024-44812CRITICAL31 ago 2024

SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the usern

48RIESGO

abrir ↗

GitHub PoC★ 35

sinsinology/CVE-2024-6670

CVE-2024-6670CRITICALbajo ataqueransomware30 ago 2024

WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 140

exploits for CVE-2024-20017

CVE-2024-20017CRITICAL30 ago 2024

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote cod

60RIESGO

abrir ↗

GitHub PoC★ 23

Proof of concept : CVE-2024-1071: WordPress Vulnerability Exploited

CVE-2024-1071CRITICAL30 ago 2024

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

85RIESGO

abrir ↗

GitHub PoC

A POC demo on CVE-2023-38831

CVE-2023-38831HIGHbajo ataqueransomware30 ago 2024

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC★ 7

Fully automated PoC - CVE-2024-25641 - RCE - Cacti < v1.2.26 🌵

CVE-2024-25641CRITICAL29 ago 2024

Cacti RCE vulnerability when importing packages

85RIESGO

abrir ↗

GitHub PoC★ 294

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

CVE-2017-12615HIGHbajo ataqueransomware29 ago 2024

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

abrir ↗

GitHub PoC

LuisMateo1/Arbitrary-File-Read-CVE-2024-24919

CVE-2024-24919HIGHbajo ataqueransomware29 ago 2024

Information disclosure

100RIESGO

abrir ↗

GitHub PoC★ 1

In an era where digital security is crucial, a new vulnerability in OpenSSH, identified as CVE-2024-6387, has drawn the attention of system administrators and security professionals worldwide. Named "regreSSHion," this severe security flaw allows remote code execution (RCE) and could significant threat to the integrity of vulnerable systems.

CVE-2024-6387HIGH29 ago 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC★ 83

mistymntncop/CVE-2024-5274

CVE-2024-5274HIGHbajo ataque29 ago 2024

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside

76RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2019-15107 Webmin unauthenticated RCE

CVE-2019-15107CRITICALbajo ataqueransomware29 ago 2024

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.