Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.689 exploits

GitHub PoC★ 5

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

CVE-2023-5360—05 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

GitHub PoC

In this repository you will find the technical report of Nibbles, the exploit to abuse the CVE-2015-6967 and an autopwn tool in case you want to resolve the machine in HackTheBox

CVE-2015-6967—05 nov 2023

Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to

50RIESGO

GitHub PoC★ 27

WonderCMS Authenticated RCE - CVE-2023-41425

CVE-2023-41425MEDIUM05 nov 2023

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code

60RIESGO

GitHub PoC

ayushx007/CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847HIGHbajo ataque05 nov 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

GitHub PoC★ 17

Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

CVE-2023-3452CRITICAL05 nov 2023

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

63RIESGO

GitHub PoC★ 40

evkl1d/CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware04 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 3

This is an exploit file which is used to check CVE-2021-21716 vulnerability

CVE-2023-21716CRITICAL04 nov 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

GitHub PoC

Wordpress CVE-2023-5360

CVE-2023-5360—03 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

GitHub PoC★ 3

An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs

CVE-2023-46747CRITICALbajo ataqueransomware03 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC★ 126

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

CVE-2023-46604CRITICALbajo ataqueransomware03 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 7

An Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS routers

CVE-2023-20198CRITICALbajo ataque03 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

GitHub PoC

NestyF/SSH_Enum_CVE-2018-15473

CVE-2018-15473MEDIUM02 nov 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

GitHub PoC

sajaljat/CVE-2023-46980

CVE-2023-46980CRITICAL02 nov 2023

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privile

48RIESGO

GitHub PoC★ 8

Checker for CVE-2023-22518 vulnerability on Confluence

CVE-2023-22518CRITICALbajo ataqueransomware02 nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RIESGO

GitHub PoC★ 10

Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: CVE-2023-5360.

CVE-2023-5360—02 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

GitHub PoC★ 7

nvansluis/test_cve-2023-46747

CVE-2023-46747CRITICALbajo ataqueransomware02 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC

jakedmurphy1/CVE-2023-46954

CVE-2023-46954CRITICAL02 nov 2023

SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacke

48RIESGO

GitHub PoC★ 208

exploit for f5-big-ip RCE cve-2023-46747

CVE-2023-46747CRITICALbajo ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC

SideCopy APT Group exploits CVE-2023-38831

CVE-2023-38831HIGHbajo ataqueransomware01 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

GitHub PoC★ 2

maniak-academy/Mitigate-CVE-2023-46747

CVE-2023-46747CRITICALbajo ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC

CVE-2023-46747 Criticle Auth Bypass

CVE-2023-46747CRITICALbajo ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC★ 1

A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab

CVE-2021-22205CRITICALbajo ataqueransomware01 nov 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

GitHub PoC

4xolotl/CVE-2018-15473

CVE-2018-15473MEDIUM31 oct 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

GitHub PoC★ 14

BoltWire v6.03 vulnerable to "Improper Access Control"

CVE-2023-46501CRITICAL31 oct 2023

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view a

48RIESGO

GitHub PoC

jetty /CVE-2021-28164/분석 및 결과

CVE-2021-28164MEDIUM31 oct 2023

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contai

70RIESGO

GitHub PoC★ 61

Improper Authorization Vulnerability in Confluence Data Center and Server

CVE-2023-22518CRITICALbajo ataqueransomware31 oct 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RIESGO

GitHub PoC★ 1

EXPLOIT FOR CVE-2014-6271

CVE-2014-6271CRITICALbajo ataque31 oct 2023

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC★ 2

a Proof of Concept of cve-2021-43226,stack overflow in Windows driver clfs.sys

CVE-2021-43226HIGHbajo ataque30 oct 2023

Windows Common Log File System Driver Elevation of Privilege Vulnerability

71RIESGO

GitHub PoC

longitudes de código para desencadenar esta vulnerabilidad

CVE-2023-41064HIGHbajo ataque30 oct 2023

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1

76RIESGO

GitHub PoC★ 52

CVE-2023-22515

CVE-2023-22515CRITICALbajo ataqueransomware30 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.