Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.526exploits catalogados

34.478CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8213Nuclei 4218Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.654 exploits

GitHub PoC★ 15

Torrentpier v2.4.1. CVE-2024-1651. Remote Code Execution (RCE). Exploit.

CVE-2024-1651CRITICAL23 feb 2024

Torrentpier 2.4.1 - RCE

60RIESGO

abrir ↗

GitHub PoC

hungdnvp/POC-CVE-2020-0796

CVE-2020-0796CRITICALbajo ataqueransomware23 feb 2024

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC★ 4

Bu betik, Microsoft Outlook'ta keşfedilen ve CVSS değeri 9.8 olan önemli bir güvenlik açığı olan CVE-2024-21413 için bir kavram kanıtı (PoC) sunmaktadır. MonikerLink hatası olarak adlandırılan bu güvenlik açığı, yerel NTLM bilgilerinin potansiyel sızıntısı ve uzaktan kod çalıştırma olasılığı dahil olmak üzere geniş kapsamlı etkilere sahiptir.

CVE-2024-21413CRITICALbajo ataque23 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

A Scanner for CVE-2024-1709 - ConnectWise SecureConnect Authentication Bypass Vulnerability

CVE-2024-1709CRITICALbajo ataqueransomware23 feb 2024

Authentication bypass using an alternate path or channel

100RIESGO

abrir ↗

GitHub PoC★ 8

This tool is designed to exploit the CVE-2024-25600 vulnerability found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites. The tool automates the exploitation process by retrieving nonces and sending specially crafted requests to execute arbitrary commands.

CVE-2024-25600CRITICAL22 feb 2024

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 1

AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload

CVE-2023-51409CRITICAL22 feb 2024

WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability

75RIESGO

abrir ↗

GitHub PoC★ 2

A PoC exploit for CVE-2022-33891 - Apache Spark UI Remote Code Execution (RCE)

CVE-2022-33891HIGHbajo ataque22 feb 2024

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

GitHub PoC★ 1

Scraping tool to ennumerate directories or files with the CVE-2024-23897 vulnerability in Jenkins.

CVE-2024-23897CRITICALbajo ataqueransomware21 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

abrir ↗

GitHub PoC★ 31

Nuclei template and information about the POC for CVE-2024-25600

CVE-2024-25600CRITICAL21 feb 2024

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

abrir ↗

GitHub PoC

Jason-Siu/CVE-2019-9053-Exploit-in-Python-3

CVE-2019-9053—21 feb 2024

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RIESGO

abrir ↗

GitHub PoC★ 110

ScreenConnect AuthBypass(cve-2024-1709) --> RCE!!!

CVE-2024-1709CRITICALbajo ataqueransomware21 feb 2024

Authentication bypass using an alternate path or channel

100RIESGO

abrir ↗

GitHub PoC★ 7

AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

CVE-2023-5204CRITICAL21 feb 2024

AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

63RIESGO

abrir ↗

GitHub PoC★ 3

Android Application Vulnerability Exploit

CVE-2017-13156—20 feb 2024

An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,

43RIESGO

abrir ↗

GitHub PoC

Un script realizado en python para atumatizar la vulnerabilidad CVE-2024-23897

CVE-2024-23897CRITICALbajo ataqueransomware20 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

abrir ↗

GitHub PoC★ 5

Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413CRITICALbajo ataque20 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

CVE-2024-21413 Açığını Kullanarak Giriş Bilgilerini Alma

CVE-2024-21413CRITICALbajo ataque19 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 2

Perform with massive Jenkins Reading-2-RCE

CVE-2024-23897CRITICALbajo ataqueransomware19 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

abrir ↗

GitHub PoC

Joomla! < 4.2.8 - Unauthenticated information disclosure exploit

CVE-2023-23752MEDIUMbajo ataque19 feb 2024

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 4

Priv esc in Nagios 2024R1.01

CVE-2024-24402CRITICAL18 feb 2024

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/n

48RIESGO

abrir ↗

GitHub PoC

132231g/CVE-2018-7602

CVE-2018-7602CRITICALbajo ataqueransomware18 feb 2024

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RIESGO

abrir ↗

GitHub PoC★ 11

Simple python3 script to automate CVE-2018-9995

CVE-2018-9995—18 feb 2024

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2023-36845 – Unauthenticated Juniper Remote Code Execution Vulnerability Scanner

CVE-2023-36845CRITICALbajo ataque18 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC★ 36

Auto exploitation tool for CVE-2024-24401.

CVE-2024-24401CRITICAL18 feb 2024

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payl

60RIESGO

abrir ↗

GitHub PoC

A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190)

CVE-2022-30190HIGHbajo ataqueransomware17 feb 2024

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code.

CVE-2023-36845CRITICALbajo ataque17 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC★ 257

CVE-2024-21413 PoC for THM Lab

CVE-2024-21413CRITICALbajo ataque17 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 765

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413CRITICALbajo ataque16 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 17

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - CVE-2024-21413 POC

CVE-2024-21413CRITICALbajo ataque16 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 10

AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777

CVE-2023-48777CRITICAL16 feb 2024

WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

63RIESGO

abrir ↗

GitHub PoC

wxrdnx/CVE-2023-38408

CVE-2023-38408CRITICAL16 feb 2024

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

70RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.