Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados

34.432CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

13.627 exploits

GitHub PoC★ 8

Perform with massive Wordpress SQLI 2 RCE

CVE-2024-27956CRITICAL11 jul 2024

WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 3

This project demonstrates a Web Application Firewall (WAF) simulation using Flask and a vulnerability checker for CVE-2017-5638. The WAF middleware blocks HTTP requests containing specific patterns, and the vulnerability checker tests for and exploits the Apache Struts 2 vulnerability (CVE-2017-5638).

CVE-2017-5638CRITICALbajo ataqueransomware11 jul 2024

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

abrir ↗

GitHub PoC

ThinkAdmin v5 v6 任意文件读取漏洞利用，可自定义字典爆破

CVE-2020-25540—11 jul 2024

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on

60RIESGO

abrir ↗

GitHub PoC

Examining the phases of an attack using “Dragonfish's Elise Malware”, specifically, exploring the exploitation of vulnerability CVE-2017-11882.

CVE-2017-11882HIGHbajo ataqueransomware11 jul 2024

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

abrir ↗

GitHub PoC★ 5

ATTACK PoC - PHP CVE-2024-4577

CVE-2024-4577CRITICALbajo ataqueransomware11 jul 2024

Argument Injection in PHP-CGI

100RIESGO

abrir ↗

GitHub PoC

Burp Extension to test for CVE-2024-34102

CVE-2024-34102CRITICALbajo ataque11 jul 2024

XXE can expose crypt key and other secrets granting full admin access

100RIESGO

abrir ↗

GitHub PoC★ 1

OpenSSH vulnerability CVE-2024-6387

CVE-2024-6387HIGH11 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC

DimaMend/cve-2024-6387-poc

CVE-2024-6387HIGH10 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC★ 3

Guardian Code: A Script to Uncover CVE-2024-5274 Vulnerabilities

CVE-2024-5274HIGHbajo ataque10 jul 2024

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside

76RIESGO

abrir ↗

GitHub PoC

year 2 semester 1 Systems and Network Programming Assignment

CVE-2015-3864—10 jul 2024

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in A

60RIESGO

abrir ↗

GitHub PoC★ 1

Rejetto HTTP File Server (HFS) 2.x - Unauthenticated RCE exploit module (CVE-2024-23692)

CVE-2024-23692CRITICALbajo ataque10 jul 2024

Rejetto HTTP File Server 2.3m Unauthenticated RCE

100RIESGO

abrir ↗

GitHub PoC

year 2 semester 1 Systems and Network Programming Assignment

CVE-2019-6447—10 jul 2024

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC

regreSSHion is a security tool designed to test for vulnerabilities related to CVE-2024-6387, specifically focusing on SSH and remote access exploitation.

CVE-2024-6387HIGH09 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC

dgourillon/mitigate-CVE-2024-6387

CVE-2024-6387HIGH09 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC

This Rust Code is designed to check SSH servers for the CVE-2024-6387 vulnerability

CVE-2024-6387HIGH09 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC★ 102

This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.

CVE-2024-6387HIGH09 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2023-4220 - Chamilo LMS - Unauthenticated File Upload in BigUpload

CVE-2023-4220HIGH09 jul 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

abrir ↗

GitHub PoC★ 7

alperenugurlu/CVE-2024-3596-Detector

CVE-2024-3596CRITICAL09 jul 2024

RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

53RIESGO

abrir ↗

GitHub PoC

foudadev/CVE-2007-2447

CVE-2007-2447—09 jul 2024

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC

This is a exploit for CVE-2007-2447; Vulnerable SMB

CVE-2007-2447—08 jul 2024

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC

Chef Inspec profile for checking regreSSHion vulnerability CVE-2024-6387

CVE-2024-6387HIGH08 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC★ 4

PIN-based Authentication Bypass vulnerability in Kaiten

CVE-2024-41276CRITICAL08 jul 2024

A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanism

48RIESGO

abrir ↗

GitHub PoC

poc for CVE-2024-34102

CVE-2024-34102CRITICALbajo ataque08 jul 2024

XXE can expose crypt key and other secrets granting full admin access

100RIESGO

abrir ↗

GitHub PoC★ 17

Exploit for CVE-2024-4885

CVE-2024-4885CRITICALbajo ataque08 jul 2024

WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 186

Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)

CVE-2024-6387HIGH08 jul 2024

Openssh: regresshion - race condition in ssh allows rce/dos

63RIESGO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2024-4883

CVE-2024-4883CRITICAL08 jul 2024

WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

60RIESGO

abrir ↗

GitHub PoC★ 5

This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location "/main/inc/lib/javascript/bigupload/inc/bigUpload.php" in Chamilo LMS <= v1.11.24, and Attackers can obtain remote code execution via uploading of web shell.

CVE-2023-4220HIGH08 jul 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

abrir ↗

GitHub PoC★ 1

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

CVE-2023-4220HIGH07 jul 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

abrir ↗

GitHub PoC★ 5

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

CVE-2023-4220HIGH07 jul 2024

Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

78RIESGO

abrir ↗

GitHub PoC

sysonlai/CVE-2024-32002-hook

CVE-2024-32002CRITICAL07 jul 2024

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.