Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.689 exploits

GitHub PoC★ 1

CVE-2023-38831 Proof-of-concept code

CVE-2023-38831HIGHbajo ataqueransomware12 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC

hadrian3689/CVE-2023-23752_Joomla

CVE-2023-23752MEDIUMbajo ataque11 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 2

Cisco CVE-2023-20198

CVE-2023-20198CRITICALbajo ataque11 dic 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

abrir ↗

GitHub PoC

sigridou/CVE-2023-44487-

CVE-2023-44487HIGHbajo ataque11 dic 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC★ 46

PoC Exploit for VM2 Sandbox Escape Vulnerability

CVE-2023-30547CRITICAL10 dic 2023

Sandbox Escape in vm2

70RIESGO

abrir ↗

GitHub PoC

Porting the CVE-2020-0674 exploit for Windows8.1 and Windows10

CVE-2020-0674HIGHbajo ataque10 dic 2023

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

93RIESGO

abrir ↗

GitHub PoC

qailanet/cve-2022-41352-zimbra-rce

CVE-2022-41352CRITICALbajo ataque10 dic 2023

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through ama

100RIESGO

abrir ↗

GitHub PoC

PoC of CVE-2023-4911

CVE-2023-4911HIGHbajo ataque10 dic 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 2

Exploit for CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware09 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 1

Vulnerability in HTTP Protocol Stack Enabling Remote Code Execution and Potential System Crash.

CVE-2022-21907CRITICAL09 dic 2023

HTTP Protocol Stack Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 14

CVE-2023-20273 Exploit PoC

CVE-2023-20273HIGHbajo ataque09 dic 2023

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject c

100RIESGO

abrir ↗

GitHub PoC★ 8

CVE-2023-50643

CVE-2023-50643CRITICAL08 dic 2023

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode a

48RIESGO

abrir ↗

GitHub PoC★ 27

An authorized remote user with access or knowledge of the standard encryption key can gain access and decrypt the FortiOS backup files and all non-administator passwords, private keys and High Availability passwords.

CVE-2019-6693MEDIUMbajo ataqueransomware08 dic 2023

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RIESGO

abrir ↗

GitHub PoC

Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.

CVE-2023-4966CRITICALbajo ataqueransomware08 dic 2023

Unauthenticated sensitive information disclosure

100RIESGO

abrir ↗

GitHub PoC

Check for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198

CVE-2023-20198CRITICALbajo ataque08 dic 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

abrir ↗

GitHub PoC★ 2

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware07 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2023-28432 Minio Information isclosure Exploit

CVE-2023-28432HIGHbajo ataque07 dic 2023

Minio Information Disclosure in Cluster Deployment

100RIESGO

abrir ↗

GitHub PoC★ 2

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

CVE-2021-44228CRITICALbajo ataqueransomware07 dic 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 1

POC&EXP for GlassFish<4.1.1(not including 4.1.1).

CVE-2017-1000028—07 dic 2023

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RIESGO

abrir ↗

GitHub PoC

ag-rodriguez/CVE-2023-24078

CVE-2023-24078HIGH07 dic 2023

Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c

53RIESGO

abrir ↗

GitHub PoC★ 4

Thực nghiệm CVE-2021-44790

CVE-2021-44790—05 dic 2023

Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

45RIESGO

abrir ↗

GitHub PoC★ 871

BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).

CVE-2026-3609MEDIUM05 dic 2023

XIGNCODE3 xhunter1.sys kernel driver contains a Privilege Escalation Vulnerability

33RIESGO

abrir ↗

GitHub PoC★ 38

ownCloud exploits for CVE-2023-49105

CVE-2023-49105CRITICAL05 dic 2023

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file wit

53RIESGO

abrir ↗

GitHub PoC

CygnusX-26/CVE-2022-44268-fixed-PoC

CVE-2022-44268MEDIUM04 dic 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

GitHub PoC★ 1

For Aina

CVE-2023-2024CRITICAL04 dic 2023

Improper Authentication for OpenBlue Enterprise Manager Data Collector

48RIESGO

abrir ↗

GitHub PoC

Proof-of-concept of CVE-2023-38831

CVE-2023-38831HIGHbajo ataqueransomware04 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC★ 16

A PoC exploit for CVE-2023-23752 - Joomla Improper Access Check in Versions 4.0.0 through 4.2.7

CVE-2023-23752MEDIUMbajo ataque04 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 4

thanhlam-attt/CVE-2023-25690

CVE-2023-25690CRITICAL04 dic 2023

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RIESGO

abrir ↗

GitHub PoC★ 2

A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432

CVE-2022-39197MEDIUMbajo ataque03 dic 2023

An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote att

75RIESGO

abrir ↗

GitHub PoC★ 2

A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432

CVE-2023-21839HIGHbajo ataque03 dic 2023

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.