Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.689 exploits

GitHub PoC

Custom POC of CVE-2021-22986 by Al1ex@Heptagram

CVE-2021-22986CRITICALbajo ataqueransomware28 dic 2023

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RIESGO

abrir ↗

GitHub PoC

ducnorth2712/CVE-2023-23397

CVE-2023-23397CRITICALbajo ataque28 dic 2023

Microsoft Outlook Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2006-2842 is a powerful scanner for bug bounty hunters and penetration testers to discover vulnerabilities in their web applications.

CVE-2006-2842—28 dic 2023

PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals i

50RIESGO

abrir ↗

GitHub PoC

solomon12354/LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

CVE-2022-0847HIGHbajo ataque28 dic 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC

substing/CVE-2019-11447_reverse_shell_upload

CVE-2019-11447—28 dic 2023

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RIESGO

abrir ↗

GitHub PoC

vinnie1717/CVE-2023-48974

CVE-2023-48974CRITICAL28 dic 2023

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges

48RIESGO

abrir ↗

GitHub PoC★ 13

Exploit for Microsoft SharePoint 2019

CVE-2023-24955HIGHbajo ataqueransomware28 dic 2023

Microsoft SharePoint Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

jee web project with sanitised log4shell (CVE-2021-44228) vulnerability

CVE-2021-44228CRITICALbajo ataqueransomware27 dic 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC

POC +report note

CVE-2018-17552—27 dic 2023

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigat

60RIESGO

abrir ↗

GitHub PoC★ 4

motikan2010/CVE-2023-6553-PoC

CVE-2023-6553CRITICAL27 dic 2023

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

85RIESGO

abrir ↗

GitHub PoC

DDayLuong/CVE-2019-18634

CVE-2019-18634—27 dic 2023

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RIESGO

abrir ↗

GitHub PoC

DDayLuong/CVE-2021-3156

CVE-2021-3156HIGHbajo ataque27 dic 2023

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 5

Exploit for Arbitrary File Read for CVE-2023-26360 - Adobe Coldfusion

CVE-2023-26360HIGHbajo ataque26 dic 2023

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RIESGO

abrir ↗

GitHub PoC★ 1

MkJos/CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246CRITICALbajo ataque26 dic 2023

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RIESGO

abrir ↗

GitHub PoC★ 2

Exploit Development using python for CVE-2023-38831 (POC)

CVE-2023-38831HIGHbajo ataqueransomware26 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC★ 9

🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓

CVE-2021-4045CRITICAL26 dic 2023

TP-LINK Tapo C200 remote code execution vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 1

This is a exploit of CVE-2021-32305 a web vulnerability to command injection on search.php path, this exploit allows execute commands.

CVE-2021-32305—26 dic 2023

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RIESGO

abrir ↗

GitHub PoC

kimstars/POC-CVE-2022-28117

CVE-2022-28117—26 dic 2023

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the ap

43RIESGO

abrir ↗

GitHub PoC

tannlh/CVE-2018-20250

CVE-2018-20250HIGHbajo ataqueransomware26 dic 2023

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RIESGO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2023-41892

CVE-2023-41892CRITICAL26 dic 2023

Craft CMS Remote Code Execution vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 1

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader]

CVE-2023-1389HIGHbajo ataque25 dic 2023

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RIESGO

abrir ↗

GitHub PoC★ 1

Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration testing and ethical hacking. Developed and maintained by Mohamed Mounir Boudjema, this repository is crafted with a deep understanding of the evolving landscape of cybersecurity.

CVE-2023-6710MEDIUM25 dic 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RIESGO

abrir ↗

GitHub PoC★ 2

Explore the depths of CVE-2023-6710 with our comprehensive Proof of Concept (PoC). This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks.

CVE-2023-6710MEDIUM25 dic 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RIESGO

abrir ↗

GitHub PoC★ 13

dust-life/CVE-2019-18935-memShell

CVE-2019-18935CRITICALbajo ataqueransomware25 dic 2023

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RIESGO

abrir ↗

GitHub PoC★ 18

puckiestyle/CVE-2023-0386

CVE-2023-0386HIGHbajo ataque23 dic 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RIESGO

abrir ↗

GitHub PoC

CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker

CVE-2023-46604CRITICALbajo ataqueransomware23 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 2

puckiestyle/CVE-2023-4911

CVE-2023-4911HIGHbajo ataque23 dic 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 4

Guillaume-Risch/cve-2023-29357-Sharepoint

CVE-2023-29357CRITICALbajo ataqueransomware22 dic 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 16

CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that leads to Remote Command Execution via crafted docx document.

CVE-2023-50254CRITICAL22 dic 2023

Deepin Reader RCE vulnerability due to a design flaw

48RIESGO

abrir ↗

GitHub PoC★ 2

Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key

CVE-2016-4437CRITICALbajo ataque22 dic 2023

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.