Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados

34.432CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

13.627 exploits

GitHub PoC★ 294

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

CVE-2020-1938CRITICALbajo ataque29 ago 2024

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RIESGO

GitHub PoC★ 1

【Teedy 1.11】Account Takeover via XSS

CVE-2024-46278HIGH28 ago 2024

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.

41RIESGO

GitHub PoC★ 4

Windows TCP/IP IPv6(CVE-2024-38063)

CVE-2024-38063CRITICAL28 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

GitHub PoC★ 7

potential memory corruption vulnerabilities in IPv6 networks.

CVE-2024-38063CRITICAL28 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

GitHub PoC★ 2

Remotely Exploiting The Kernel Via IPv6

CVE-2024-38063CRITICAL28 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

GitHub PoC★ 6

This exploit will attempt to execute system commands on SPIP targets.

CVE-2024-7954CRITICAL28 ago 2024

SPIP porte_plume Plugin Arbitrary PHP Execution

85RIESGO

GitHub PoC

Apache: a Mainstream Web Service Turned a Vector of Attack for Remote Code Execution

CVE-2021-41773HIGHbajo ataqueransomware28 ago 2024

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

GitHub PoC★ 3

Apache OFBiz CVE-2024-38856

CVE-2024-38856HIGHbajo ataque28 ago 2024

Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

100RIESGO

GitHub PoC

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

CVE-2024-7593CRITICALbajo ataque28 ago 2024

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remo

100RIESGO

GitHub PoC★ 2

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.

CVE-2024-6387HIGH28 ago 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

GitHub PoC★ 2

D0rDa4aN919/CVE-2023-22809-Exploiter

CVE-2023-22809HIGH28 ago 2024

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RIESGO

GitHub PoC

CVE-2023-4220 Chamilo Exploit

CVE-2023-4220HIGH27 ago 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

GitHub PoC★ 4

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879

CVE-2024-4879CRITICALbajo ataque27 ago 2024

Jelly Template Injection Vulnerability in ServiceNow UI Macros

100RIESGO

GitHub PoC★ 10

CVE-2024-25641 - RCE Automated Exploit - Cacti 1.2.26

CVE-2024-25641CRITICAL27 ago 2024

Cacti RCE vulnerability when importing packages

85RIESGO

GitHub PoC★ 1

Nuclei template to scan for Apache Ofbiz affecting versions before 18.12.15

CVE-2024-38856HIGHbajo ataque27 ago 2024

Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

100RIESGO

GitHub PoC★ 4

Mass scanner for CVE-2024-36401

CVE-2024-36401CRITICALbajo ataque27 ago 2024

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

100RIESGO

GitHub PoC★ 20

patchpoint/CVE-2024-38063

CVE-2024-38063CRITICAL27 ago 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

GitHub PoC★ 7

PoC for the CVE-2024 Litespeed Cache Privilege Escalation

CVE-2024-28000CRITICAL27 ago 2024

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

75RIESGO

GitHub PoC★ 2

CVE-2023-41425 - Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

CVE-2023-41425MEDIUM27 ago 2024

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code

60RIESGO

GitHub PoC

zxybfq/CVE-2021-4034

CVE-2021-4034HIGHbajo ataque27 ago 2024

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

GitHub PoC★ 2

PoC for CVE-2024-25641 Authenticated RCE on Cacti v1.2.26

CVE-2024-25641CRITICAL27 ago 2024

Cacti RCE vulnerability when importing packages

85RIESGO

GitHub PoC★ 2

Apache-HTTP-Server-2.4.50-RCE This tool is designed to test Apache servers for the CVE-2021-41773 / CVE-2021-42013 vulnerability. It is intended for educational purposes only and should be used responsibly on systems you have explicit permission to test.

CVE-2021-41773HIGHbajo ataqueransomware26 ago 2024

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

GitHub PoC

POC & Lab For CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware26 ago 2024

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

GitHub PoC

sanan2004/CVE-2023-20198

CVE-2023-20198CRITICALbajo ataque26 ago 2024

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

GitHub PoC

CVE-2024-45265

CVE-2024-45265CRITICAL26 ago 2024

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to exe

48RIESGO

GitHub PoC

Sudo Privilege Escalation: CVE-2023-22809 Simulation This project simulates the Sudo privilege escalation vulnerability (CVE-2023-22809) to demonstrate how unauthorized root access can be gained. It involves identifying and exploiting this vulnerability in a controlled environment using Parrot OS, the Sudo command, and Bash scripting.

CVE-2023-22809HIGH26 ago 2024

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RIESGO

GitHub PoC★ 8

This repository automates the process of exploiting CVE-2024-25641 on Cacti 1.2.26

CVE-2024-25641CRITICAL26 ago 2024

Cacti RCE vulnerability when importing packages

85RIESGO

GitHub PoC

RCE OpenSSH CVE-2024-6387 Check and Exploit

CVE-2024-6387HIGH26 ago 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

GitHub PoC★ 2

Modified for GLPI Offsec Lab: call_user_func, array_map, passthru

CVE-2022-35914CRITICALbajo ataque25 ago 2024

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RIESGO

GitHub PoC★ 5

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000

CVE-2024-28000CRITICAL25 ago 2024

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

75RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.