Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados
34.508CVEs con explotación pública
24.695probados en laboratorio
13.689 exploits
GitHub PoC52
CVE-2023-22515
CVE-2023-22515CRITICALbajo ataqueransomware30 oct 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir
GitHub PoC2
Joomla Unauthorized Access Vulnerability
CVE-2023-23752MEDIUMbajo ataque30 oct 2023
[20230201] - Core - Improper access check in webservice endpoints
100RIESGO
abrir
GitHub PoC2
a Proof of Concept of cve-2021-43226,stack overflow in Windows driver clfs.sys
CVE-2021-43226HIGHbajo ataque30 oct 2023
Windows Common Log File System Driver Elevation of Privilege Vulnerability
71RIESGO
abrir
GitHub PoC
CVE-2009-3103 ms09-050
CVE-2009-310329 oct 2023
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RIESGO
abrir
GitHub PoC
Demonstration of CVE-2022-31692 authorization bypass in Spring Security
CVE-2022-31692CRITICAL29 oct 2023
Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass v
48RIESGO
abrir
GitHub PoC10
An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability
CVE-2023-4966CRITICALbajo ataqueransomware29 oct 2023
Unauthenticated sensitive information disclosure
100RIESGO
abrir
GitHub PoC2
CVE-2023-33246 - Apache RocketMQ config RCE
CVE-2023-33246CRITICALbajo ataque28 oct 2023
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RIESGO
abrir
GitHub PoC9
Proof of concept for CVE-2023-4911 (Looney Tunables) discovered by Qualys Threat Research Unit
CVE-2023-4911HIGHbajo ataque28 oct 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
100RIESGO
abrir
GitHub PoC5
Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation
CVE-2023-4966CRITICALbajo ataqueransomware28 oct 2023
Unauthenticated sensitive information disclosure
100RIESGO
abrir
GitHub PoC
detect bruteforce using for cve-2021-34527
CVE-2021-34527HIGHbajo ataqueransomware28 oct 2023
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
This is a POC for CVE-2022-22963
CVE-2022-22963CRITICALbajo ataque28 oct 2023
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RIESGO
abrir
GitHub PoC
nhuynhuy/cve-2017-11882
CVE-2017-11882HIGHbajo ataqueransomware28 oct 2023
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RIESGO
abrir
GitHub PoC
CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit
CVE-2023-4966CRITICALbajo ataqueransomware27 oct 2023
Unauthenticated sensitive information disclosure
100RIESGO
abrir
GitHub PoC5
Stack-Overflow on Citrix
CVE-2023-3519CRITICALbajo ataqueransomware27 oct 2023
Unauthenticated remote code execution
100RIESGO
abrir
GitHub PoC8
MosaedH/CVE-2022-32548-RCE-POC
CVE-2022-32548CRITICAL27 oct 2023
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin
60RIESGO
abrir
GitHub PoC1
CVE-2023-22515
CVE-2023-22515CRITICALbajo ataqueransomware27 oct 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir
GitHub PoC28
CVE-2023-46604
CVE-2023-46604CRITICALbajo ataqueransomware26 oct 2023
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RIESGO
abrir
GitHub PoC4
This script exploits CVE-2023-23397, a Zero-Day vulnerability in Microsoft Outlook, allowing the generation of malicious emails for testing and educational purposes.
CVE-2023-23397CRITICALbajo ataque26 oct 2023
Microsoft Outlook Elevation of Privilege Vulnerability
100RIESGO
abrir
GitHub PoC
katseyres2/CVE-2021-43798
CVE-2021-43798HIGHbajo ataque26 oct 2023
Grafana path traversal
100RIESGO
abrir
GitHub PoC
h1n4mx0z/Research-CVE-2016-5195
CVE-2016-5195HIGHbajo ataque26 oct 2023
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir
GitHub PoC
h1n4mx0/Research-CVE-2016-5195
CVE-2016-5195HIGHbajo ataque26 oct 2023
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir
GitHub PoC3
PoC and Writeup for CVE-2023-46404.
CVE-2023-46404CRITICAL26 oct 2023
PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping
48RIESGO
abrir
GitHub PoC
CVE-2023-5360
CVE-2023-536026 oct 2023
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
60RIESGO
abrir
GitHub PoC13
phankz/Worpress-CVE-2023-5360
CVE-2023-536026 oct 2023
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
60RIESGO
abrir
GitHub PoC
CVE-2019-10149
CVE-2019-10149CRITICALbajo ataque25 oct 2023
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(
100RIESGO
abrir
GitHub PoC1
IceBreakerCode/CVE-2023-4966
CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023
Unauthenticated sensitive information disclosure
100RIESGO
abrir
GitHub PoC8
Proof Of Concept for te NetScaler Vuln
CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023
Unauthenticated sensitive information disclosure
100RIESGO
abrir
GitHub PoC11
Citrix CVE-2023-4966 from assetnote modified for parallel and file handling
CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023
Unauthenticated sensitive information disclosure
100RIESGO
abrir
GitHub PoC2
mr-r3b00t/CVE-2023-20198-IOS-XE-Scanner
CVE-2023-20198CRITICALbajo ataque25 oct 2023
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS
100RIESGO
abrir
GitHub PoC
Bash script to check if kernel is vulnerable
CVE-2022-0847HIGHbajo ataque25 oct 2023
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir
anteriorpágina 252 / 457siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.