Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.526exploits catalogados

34.478CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8213Nuclei 4218Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.654 exploits

GitHub PoC★ 1

Checker for CVE-2024-3094 where malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code.

CVE-2024-3094CRITICAL30 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC

More specific : Dirty COW (CVE-2016-5195)

CVE-2016-5195HIGHbajo ataque30 mar 2024

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

GitHub PoC

ashwani95/CVE-2024-3094

CVE-2024-3094CRITICAL30 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC★ 8

This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094.

CVE-2024-3094CRITICAL29 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC★ 54

Information for CVE-2024-3094

CVE-2024-3094CRITICAL29 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC★ 72

Quick and dirty PoC for checking whether a vulnerable version of xz-utils is installed (CVE-2024-3094)

CVE-2024-3094CRITICAL29 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC★ 4

Verify that your XZ Utils version is not vulnerable to CVE-2024-3094

CVE-2024-3094CRITICAL29 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC

OpensourceICTSolutions/xz_utils-CVE-2024-3094

CVE-2024-3094CRITICAL29 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC

Script to detect CVE-2024-3094.

CVE-2024-3094CRITICAL29 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC

Fractal-Tess/CVE-2024-3094

CVE-2024-3094CRITICAL29 mar 2024

Xz: malicious code in distributed source

70RIESGO

GitHub PoC★ 6

ShadowRay RCE POC (CVE-2023-48022)

CVE-2023-48022CRITICAL29 mar 2024

Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the ve

85RIESGO

GitHub PoC★ 8

This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698.

CVE-2024-1698CRITICAL29 mar 2024

NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection

85RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2012-0003HIGH28 mar 2024

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows

68RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2010-3333HIGHbajo ataque28 mar 2024

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2

100RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2014-4114HIGHbajo ataque28 mar 2024

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

100RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2015-1701HIGHbajo ataqueransomware28 mar 2024

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RIESGO

GitHub PoC

Bludit 3.9.2 auth bruteforce bypass

CVE-2019-17240LOW28 mar 2024

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many

40RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2017-0143HIGHbajo ataqueransomware28 mar 2024

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

GitHub PoC

mind2hex/CVE-2022-46169-Cacti-v1.2.22-RCE

CVE-2022-46169CRITICALbajo ataque28 mar 2024

Unauthenticated Command Injection

100RIESGO

GitHub PoC★ 1

Check CVE-2023-42789

CVE-2023-42789CRITICAL28 mar 2024

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0

48RIESGO

GitHub PoC★ 1

Bludit 3.9.2 Remote Command Execution (RCE)

CVE-2019-16113—28 mar 2024

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

60RIESGO

GitHub PoC

A working POC found while doing a HTB challenge. Original: https://github.com/user0x1337/CVE-2022-39227

CVE-2022-39227CRITICAL28 mar 2024

Python-jwt subject to Authentication Bypass by Spoofing

48RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2019-0708CRITICALbajo ataqueransomware28 mar 2024

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

GitHub PoC

Sumitpathania03/Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246CRITICALbajo ataque28 mar 2024

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RIESGO

GitHub PoC

ticofookfook/CVE-2021-43798

CVE-2021-43798HIGHbajo ataque27 mar 2024

Grafana path traversal

100RIESGO

GitHub PoC★ 5

Unauthenticated Remote Code Execution (RCE) Vulnerability in WWBNIndex Plugin of AVideo Platform from 12.4 to 14.2

CVE-2024-31819CRITICAL27 mar 2024

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath

68RIESGO

GitHub PoC★ 5

it's a CVE-2023-28229 (Patched), but feel free to use it for check any outdated software or reseach

CVE-2023-28229HIGHbajo ataque27 mar 2024

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

71RIESGO

GitHub PoC★ 10

Exploit Toolkit for Adobe ColdFusion CVE-2024-20767 Vulnerability

CVE-2024-20767HIGHbajo ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RIESGO

GitHub PoC★ 1

Proof of Concept for CVE-2024-20767. Arbitrary file read from Adobe ColdFusion

CVE-2024-20767HIGHbajo ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RIESGO

GitHub PoC★ 34

Exploit for CVE-2024-20767 - Adobe ColdFusion

CVE-2024-20767HIGHbajo ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.