Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.689 exploits

GitHub PoC★ 8

Proof Of Concept for te NetScaler Vuln

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

abrir ↗

GitHub PoC★ 1

IceBreakerCode/CVE-2023-20198

CVE-2023-20198CRITICALbajo ataque25 oct 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

abrir ↗

GitHub PoC

A demo of the Log4Shell (CVE-2021-44228) vulnerability.

CVE-2021-44228CRITICALbajo ataqueransomware25 oct 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 18

Looney Tunables Local privilege escalation (CVE-2023-4911) workshop

CVE-2023-4911HIGHbajo ataque25 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC

CVE-2019-10149

CVE-2019-10149CRITICALbajo ataque25 oct 2023

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RIESGO

abrir ↗

GitHub PoC

Docs on the Vulnerability CVE-2019-1663 (Cisco Routers)

CVE-2019-1663CRITICAL25 oct 2023

Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 2

ReToCode/golang-CVE-2023-44487

CVE-2023-44487HIGHbajo ataque25 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC

CVE-2023-38831 is an RCE in WinRAR (<6.23)

CVE-2023-38831HIGHbajo ataqueransomware24 oct 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC

r10lab/CVE-2022-23131

CVE-2022-23131CRITICALbajo ataque24 oct 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

abrir ↗

GitHub PoC★ 1

A PoC and Exploit for CVE 2022-29464

CVE-2022-29464CRITICALbajo ataqueransomware24 oct 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 79

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

CVE-2023-4966CRITICALbajo ataqueransomware24 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

abrir ↗

GitHub PoC

hoanganh2k/cve-2018-5333

CVE-2018-5333—24 oct 2023

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning

38RIESGO

abrir ↗

GitHub PoC★ 1

Check a target IP for CVE-2023-20198

CVE-2023-20198CRITICALbajo ataque24 oct 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

abrir ↗

GitHub PoC★ 8

A PoC for CVE 2023-20198

CVE-2023-20198CRITICALbajo ataque23 oct 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

abrir ↗

GitHub PoC★ 33

This is a webshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273

CVE-2023-20198CRITICALbajo ataque23 oct 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

abrir ↗

GitHub PoC★ 41

Cisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)

CVE-2023-20198CRITICALbajo ataque23 oct 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

abrir ↗

GitHub PoC★ 41

CVE-2013-4786 Go exploitation tool

CVE-2013-4786—23 oct 2023

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote

60RIESGO

abrir ↗

GitHub PoC

Python script get image from Hikvision camera with CVE-2017-7921 vulnerability

CVE-2017-7921CRITICALbajo ataque23 oct 2023

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

abrir ↗

GitHub PoC★ 112

Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver

CVE-2023-36802HIGHbajo ataque23 oct 2023

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC★ 1

haingn/HIK-CVE-2021-36260-Exploit

CVE-2021-36260CRITICALbajo ataque22 oct 2023

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RIESGO

abrir ↗

GitHub PoC

banyaksepuh/Mass-CVE-2021-3129-Scanner

CVE-2021-3129CRITICALbajo ataqueransomware22 oct 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 3

haingn/LoHongCam-CVE-2021-33044

CVE-2021-33044CRITICALbajo ataque22 oct 2023

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

100RIESGO

abrir ↗

GitHub PoC

cve-2023-22515的python利用脚本

CVE-2023-22515CRITICALbajo ataqueransomware21 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC

ShivamDey/Samba-CVE-2007-2447-Exploit

CVE-2007-2447—21 oct 2023

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC

ShivamDey/CVE-2021-23017

CVE-2021-23017—21 oct 2023

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t

35RIESGO

abrir ↗

GitHub PoC

Nielk74/CVE-2023-38831

CVE-2023-38831HIGHbajo ataqueransomware21 oct 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload

CVE-2023-5360—21 oct 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

abrir ↗

GitHub PoC★ 3

yTxZx/CVE-2023-28432

CVE-2023-28432HIGHbajo ataque20 oct 2023

Minio Information Disclosure in Cluster Deployment

100RIESGO

abrir ↗

GitHub PoC

Trinadh465/frameworks_base_AOSP10_r33_CVE-2023-20963

CVE-2023-20963HIGHbajo ataque20 oct 2023

In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional

71RIESGO

abrir ↗

GitHub PoC★ 1

Joomla Unauthenticated Information Disclosure (CVE-2023-23752) exploit

CVE-2023-23752MEDIUMbajo ataque20 oct 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.