Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.531exploits catalogados
34.480CVEs con explotación pública
24.695probados en laboratorio
13.668 exploits
GitHub PoC
Esto es una prueba de concepto propia i basica de la vulneravilidad CVE-2019-12840 la qual te da un RCE en root
CVE-2019-1284025 ene 2024
In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root pr
60RIESGO
abrir
GitHub PoC2
whoami-chmod777/Zerologon-Attack-CVE-2020-1472-POC
CVE-2020-1472MEDIUMbajo ataqueransomware25 ene 2024
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir
GitHub PoC
CVE-2024-23739
CVE-2024-23740CRITICAL25 ene 2024
An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode
48RIESGO
abrir
GitHub PoC2
CVE-2023-46805 Ivanti POC RCE - Ultra fast scanner.
CVE-2023-46805HIGHbajo ataqueransomware25 ene 2024
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re
100RIESGO
abrir
GitHub PoC3
CVE-2024-23739
CVE-2024-23739CRITICAL25 ene 2024
An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunA
48RIESGO
abrir
GitHub PoC1
Atlassian Confluence Remote Code Execution(RCE) Proof Of Concept
CVE-2023-22527CRITICALbajo ataqueransomware25 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC5
CVE-2023-22527 - RCE (Remote Code Execution) Vulnerability In Confluence Data Center and Confluence Server PoC
CVE-2023-22527CRITICALbajo ataqueransomware25 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC
CVE-2024-23741
CVE-2024-23741CRITICAL25 ene 2024
An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode
48RIESGO
abrir
GitHub PoC4
Exploit for CVE-2023-22527 - Atlassian Confluence Data Center and Server
CVE-2023-22527CRITICALbajo ataqueransomware24 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC2
This script exploits the CVE-2024-0204 vulnerability in Fortra GoAnywhere MFT, allowing the creation of unauthorized administrative users, for educational and authorized testing purposes.
CVE-2024-0204CRITICAL24 ene 2024
Authentication Bypass in GoAnywhere MFT
85RIESGO
abrir
GitHub PoC5
CVE-2023-22527
CVE-2023-22527CRITICALbajo ataqueransomware24 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC58
mistymntncop/CVE-2022-4262
CVE-2022-4262HIGHbajo ataque24 ene 2024
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru
76RIESGO
abrir
GitHub PoC2
thanhlam-attt/CVE-2023-7028
CVE-2023-7028CRITICALbajo ataque23 ene 2024
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RIESGO
abrir
GitHub PoC65
Authentication Bypass in GoAnywhere MFT
CVE-2024-0204CRITICAL23 ene 2024
Authentication Bypass in GoAnywhere MFT
85RIESGO
abrir
GitHub PoC
Shimon03/CVE-2023-7028-Account-Take-Over-Gitlab
CVE-2023-7028CRITICALbajo ataque23 ene 2024
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RIESGO
abrir
GitHub PoC22
A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered in Confluence Server and Data Center.
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC19
[Confluence] CVE-2023-22527 realworld poc
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC4
Atlassian Confluence - Remote Code Execution (CVE-2023-22527)
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC14
This repository presents a proof-of-concept of CVE-2023-22527
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC1
Lỗ hổng ủy quyền không phù hợp trong Trung tâm dữ liệu Confluence và Máy chủ + bugsBonus 🔥
CVE-2023-22518CRITICALbajo ataqueransomware23 ene 2024
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RIESGO
abrir
GitHub PoC2
POC
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC9
Atlassian Confluence - Remote Code Execution
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC10
An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC7
Workaround for disabling the CLI to mitigate SECURITY-3314/CVE-2024-23897 and SECURITY-3315/CVE-2024-23898
CVE-2024-23897CRITICALbajo ataqueransomware23 ene 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir
GitHub PoC4
Scanning for vulnerable GoAnywhere MFT CVE-2024-0204
CVE-2024-0204CRITICAL23 ene 2024
Authentication Bypass in GoAnywhere MFT
85RIESGO
abrir
GitHub PoC5
thanhlam-attt/CVE-2023-22527
CVE-2023-22527CRITICALbajo ataqueransomware22 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC2
Drun1baby/CVE-2023-22527
CVE-2023-22527CRITICALbajo ataqueransomware22 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir
GitHub PoC
BurakSevben/CVE-2024-24142
CVE-2024-24142CRITICAL22 ene 2024
Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.
48RIESGO
abrir
GitHub PoC
Different files for computer security coursework
CVE-2021-3156HIGHbajo ataque22 ene 2024
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir
GitHub PoC55
A modification to fortra's CVE-2023-28252 exploit, compiled to exe
CVE-2023-28252HIGHbajo ataqueransomware22 ene 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
98RIESGO
abrir
anteriorpágina 242 / 456siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.