Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.689 exploits

GitHub PoC★ 13

substing/CVE-2020-24186_reverse_shell_upload

CVE-2020-24186CRITICAL21 dic 2023

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo

85RIESGO

abrir ↗

GitHub PoC★ 1

Directory Traversal and Arbitrary File Read on Grafana

CVE-2021-43798HIGHbajo ataque21 dic 2023

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC★ 5

Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)

CVE-2009-3103—20 dic 2023

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window

60RIESGO

abrir ↗

GitHub PoC

That-Guy-Steve/CVE-2018-1133-Exploit

CVE-2018-1133—20 dic 2023

An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code exec

35RIESGO

abrir ↗

GitHub PoC

OwnCloud CVE-2023-49103

CVE-2023-49103CRITICALbajo ataque19 dic 2023

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies

100RIESGO

abrir ↗

GitHub PoC

Binaries for "CVE-2023-23752"

CVE-2023-23752MEDIUMbajo ataque19 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 25

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

CVE-2023-4863HIGHbajo ataque19 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC★ 54

LiveOverflow/webp-CVE-2023-4863

CVE-2023-4863HIGHbajo ataque18 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC★ 1

Arszilla/CVE-2023-6538

CVE-2023-6538HIGH18 dic 2023

System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.

41RIESGO

abrir ↗

GitHub PoC

An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints within Joomla! CMS versions 4.0.0 through 4.2.7. This vulnerability could be exploited by attackers to gain unauthorized access to sensitive information or perform unauthorized actions.

CVE-2023-23752MEDIUMbajo ataque18 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC

Repository that contains a CVE-2020-11651 Exploit updated to work with the latest versions of python.

CVE-2020-11651CRITICALbajo ataque18 dic 2023

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RIESGO

abrir ↗

GitHub PoC

An implementation of a proof-of-concept for CVE-2018-5767

CVE-2018-5767—18 dic 2023

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code

35RIESGO

abrir ↗

GitHub PoC

jee web project with log4shell (CVE-2021-44228) vulnerability

CVE-2021-44228CRITICALbajo ataqueransomware18 dic 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 2

Simulates CVE-2023-4966 Citrix Bleed overread bug

CVE-2023-4966CRITICALbajo ataqueransomware16 dic 2023

Unauthenticated sensitive information disclosure

100RIESGO

abrir ↗

GitHub PoC

dcm2406/CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware16 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC

ZhiQiAnSecFork/cve-2017-16995

CVE-2017-16995—15 dic 2023

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RIESGO

abrir ↗

GitHub PoC★ 13

A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass

CVE-2023-32315HIGHbajo ataque15 dic 2023

Openfire administration console authentication bypass

100RIESGO

abrir ↗

GitHub PoC

markyu0401/CVE-2021-3560-Polkit-Privilege-Escalation

CVE-2021-3560HIGHbajo ataque15 dic 2023

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RIESGO

abrir ↗

GitHub PoC

ZhiQiAnSecFork/DirtyCOW_CVE-2016-5195

CVE-2016-5195HIGHbajo ataque15 dic 2023

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC

Remote Code Execution exploit for PrimeFaces 5.x - EL Injection (CVE-2017-1000486)

CVE-2017-1000486CRITICALbajo ataque15 dic 2023

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RIESGO

abrir ↗

GitHub PoC★ 5

Exihibitor Web Ui 1.7.1 RCE, CVE-2019-5029

CVE-2019-5029CRITICAL14 dic 2023

An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7

60RIESGO

abrir ↗

GitHub PoC★ 2

SQL Injection in 3CX CRM Integration

CVE-2023-49954CRITICAL14 dic 2023

The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search stri

48RIESGO

abrir ↗

GitHub PoC★ 1

imperva/CVE-2023-22524

CVE-2023-22524CRITICAL14 dic 2023

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att

53RIESGO

abrir ↗

GitHub PoC

CVE-2022-4047 poc

CVE-2022-4047CRITICAL14 dic 2023

Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload

48RIESGO

abrir ↗

GitHub PoC★ 25

Atlassian Companion RCE Vulnerability Proof of Concept

CVE-2023-22524CRITICAL14 dic 2023

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att

53RIESGO

abrir ↗

GitHub PoC★ 86

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

CVE-2023-6553CRITICAL13 dic 2023

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

85RIESGO

abrir ↗

GitHub PoC

mareks1007/cve-2017-16995

CVE-2017-16995—13 dic 2023

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RIESGO

abrir ↗

GitHub PoC

CVE-2023-23752 Joomla Unauthenticated Information Disclosure

CVE-2023-23752MEDIUMbajo ataque13 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 9

CVE-2021-40438 Apache <= 2.4.48 SSRF exploit

CVE-2021-40438CRITICALbajo ataqueransomware12 dic 2023

mod_proxy SSRF

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2023-38831 Proof-of-concept code

CVE-2023-38831HIGHbajo ataqueransomware12 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.