Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.526exploits catalogados

34.478CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8213Nuclei 4218Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.654 exploits

GitHub PoC★ 17

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - CVE-2024-21413 POC

CVE-2024-21413CRITICALbajo ataque16 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

wxrdnx/CVE-2023-38408

CVE-2023-38408CRITICAL16 feb 2024

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

70RIESGO

abrir ↗

GitHub PoC★ 157

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC

CVE-2024-21413CRITICALbajo ataque15 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

letsr00t/CVE-2022-0847

CVE-2022-0847HIGHbajo ataque15 feb 2024

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 1

This Python script automates the Proof of Concept (PoC) for CVE-2023-36845, a vulnerability impacting Juniper Networks Junos OS on EX and SRX Series devices. The vulnerability resides in the J-Web component, allowing remote manipulation of the PHPRC variable, potentially leading to code injection.

CVE-2023-36845CRITICALbajo ataque14 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC★ 1

stegano5/ExploitScript-CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware14 feb 2024

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 1

Tool for exploring CVE-2023-30547

CVE-2023-30547CRITICAL14 feb 2024

Sandbox Escape in vm2

70RIESGO

abrir ↗

GitHub PoC

CVE-2024-23897

CVE-2024-23897CRITICALbajo ataqueransomware13 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

abrir ↗

GitHub PoC

CVE-2023-36845 и CVE-2023-36846 Juniper Junos OS J-Web RCE

CVE-2023-36845CRITICALbajo ataque13 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC

Explotación CVE-2017-1000486

CVE-2017-1000486CRITICALbajo ataque13 feb 2024

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RIESGO

abrir ↗

GitHub PoC★ 5

CVES

CVE-2023-36845CRITICALbajo ataque13 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC

Lab introduction to ZeroLogon

CVE-2020-1472MEDIUMbajo ataqueransomware12 feb 2024

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

whoami-chmod777/CVE-2021-1675-CVE-2021-34527

CVE-2021-1675HIGHbajo ataqueransomware12 feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

whoami-chmod777/CVE-2021-1675---PrintNightmare-LPE-PowerShell-

CVE-2021-1675HIGHbajo ataqueransomware12 feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

quangnh89/CVE-2022-4262

CVE-2022-4262HIGHbajo ataque11 feb 2024

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru

76RIESGO

abrir ↗

GitHub PoC★ 76

CVE-2023-22527 内存马注入工具

CVE-2023-22527CRITICALbajo ataqueransomware11 feb 2024

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RIESGO

abrir ↗

GitHub PoC★ 2

vidura2/cve-2023-46747

CVE-2023-46747CRITICALbajo ataqueransomware11 feb 2024

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept

CVE-2019-11447—11 feb 2024

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RIESGO

abrir ↗

GitHub PoC

arminarab1999/CVE-2018-9995

CVE-2018-9995—09 feb 2024

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RIESGO

abrir ↗

GitHub PoC

Yanoro/CVE-2017-11176

CVE-2017-11176—08 feb 2024

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr

23RIESGO

abrir ↗

GitHub PoC

POC Badgermeter moni tool - CVE-2024-1301

CVE-2024-1301CRITICAL08 feb 2024

Multiple Vulnerabilities in Badger Meter's Monitool

48RIESGO

abrir ↗

GitHub PoC

joshbnewton31080/cve-2022-42889-text4shell

CVE-2022-42889—08 feb 2024

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RIESGO

abrir ↗

GitHub PoC

PoC to CVE-2023-30547 (Library vm2)

CVE-2023-30547CRITICAL08 feb 2024

Sandbox Escape in vm2

70RIESGO

abrir ↗

GitHub PoC

CVE-2017-0089 Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information

CVE-2017-0089—08 feb 2024

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RIESGO

abrir ↗

GitHub PoC

一款Spring综合漏洞的利用工具，工具目前支持Spring Cloud Gateway RCE(CVE-2022-22947)、Spring Framework RCE (CVE-2022-22965) 的检测以及利用

CVE-2022-22947CRITICALbajo ataque07 feb 2024

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 3

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.

CVE-2024-23897CRITICALbajo ataqueransomware07 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

abrir ↗

GitHub PoC★ 61

CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

CVE-2023-21839HIGHbajo ataque06 feb 2024

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2023-6875 exploit written for Xakep.Ru

CVE-2023-6875CRITICAL05 feb 2024

POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API

85RIESGO

abrir ↗

GitHub PoC

xMr110/CVE-2022-1040

CVE-2022-1040CRITICALbajo ataque05 feb 2024

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho

100RIESGO

abrir ↗

GitHub PoC

trustcves/CVE-2024-24398

CVE-2024-24398CRITICAL05 feb 2024

Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker

48RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.