Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.689 exploits

GitHub PoC

PoC for CVE-2023-4911 LooneyTuneables

CVE-2023-4911HIGHbajo ataque14 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 3

Confluence Broken Access Control

CVE-2023-22515CRITICALbajo ataqueransomware13 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 6

Confluence Data Center & Server 权限提升漏洞 Exploit

CVE-2023-22515CRITICALbajo ataqueransomware13 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 1

iveresk-CVE-2023-22515

CVE-2023-22515CRITICALbajo ataqueransomware13 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 76

Tool for testing mitigations and exposure to Rapid Reset DDoS (CVE-2023-44487)

CVE-2023-44487HIGHbajo ataque13 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC

Vagebondcur/IMAGE-MAGICK-CVE-2022-44268

CVE-2022-44268MEDIUM13 oct 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

GitHub PoC★ 63

xortigate-cve-2023-27997

CVE-2023-27997CRITICALbajo ataqueransomware12 oct 2023

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi

100RIESGO

abrir ↗

GitHub PoC★ 25

Confluence Unauthorized Administrator User Addition Exploitation Script

CVE-2023-22515CRITICALbajo ataqueransomware12 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 1

ruycr4ft/CVE-2023-38831

CVE-2023-38831HIGHbajo ataqueransomware12 oct 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC★ 9

delsploit/CVE-2023-27997

CVE-2023-27997CRITICALbajo ataqueransomware12 oct 2023

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi

100RIESGO

abrir ↗

GitHub PoC

CVE-2023-44487

CVE-2023-44487HIGHbajo ataque12 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC

Test Script for CVE-2023-44487

CVE-2023-44487HIGHbajo ataque12 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC

Security Vulnerability - Kardex Mlog MCC

CVE-2023-22855CRITICAL11 oct 2023

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 808

53RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server

CVE-2023-22515CRITICALbajo ataqueransomware11 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 110

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

CVE-2023-22515CRITICALbajo ataqueransomware11 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 18

CVE-2023-4911

CVE-2023-4911HIGHbajo ataque11 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 56

Proof of concept for DoS exploit

CVE-2023-44487HIGHbajo ataque11 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC

CVE-2023-4911

CVE-2023-4911HIGHbajo ataque10 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC

Apache Superset 默认SECRET_KEY 漏洞(CVE-2023-27524)

CVE-2023-27524HIGHbajo ataque10 oct 2023

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RIESGO

abrir ↗

GitHub PoC★ 29

hadrian3689/looney-tunables-CVE-2023-4911

CVE-2023-4911HIGHbajo ataque10 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC

Openfire未授权到RCE(CVE-2023-32315)复现

CVE-2023-32315HIGHbajo ataque10 oct 2023

Openfire administration console authentication bypass

100RIESGO

abrir ↗

GitHub PoC★ 2

Recreation of the SharePoint PoC for CVE-2023-29357 in C# from LuemmelSec

CVE-2023-29357CRITICALbajo ataqueransomware10 oct 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 153

CVE-2023-22515: Confluence Broken Access Control Exploit

CVE-2023-22515CRITICALbajo ataqueransomware10 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 246

Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487

CVE-2023-44487HIGHbajo ataque10 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC★ 8

Poc for CVE-2023-22515

CVE-2023-22515CRITICALbajo ataqueransomware10 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 1

WebAccess远程命令执行漏洞(CVE-2017-16720)复现

CVE-2017-16720—10 oct 2023

A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within th

35RIESGO

abrir ↗

GitHub PoC

An implementation of a proof-of-concept for CVE-2018-5767 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5767)

CVE-2018-5767—09 oct 2023

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code

35RIESGO

abrir ↗

GitHub PoC★ 164

LPE exploit for CVE-2023-36802

CVE-2023-36802HIGHbajo ataque09 oct 2023

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC★ 1

xiaoQ1z/CVE-2023-4911

CVE-2023-4911HIGHbajo ataque08 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 16

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

CVE-2023-5217HIGHbajo ataque06 oct 2023

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo

83RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.