Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.689 exploits

GitHub PoC

Trinadh465/platform_external_libvpx_v1.4.0_CVE-2023-5217

CVE-2023-5217HIGHbajo ataque06 oct 2023

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo

83RIESGO

abrir ↗

GitHub PoC

Trinadh465/platform_external_libvpx_v1.8.0_CVE-2023-5217

CVE-2023-5217HIGHbajo ataque06 oct 2023

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo

83RIESGO

abrir ↗

GitHub PoC★ 16

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

CVE-2023-5217HIGHbajo ataque06 oct 2023

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo

83RIESGO

abrir ↗

GitHub PoC★ 79

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence

CVE-2023-22515CRITICALbajo ataqueransomware06 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 9

Utilize Tai-e to identify the Log4shell (a.k.a. CVE-2021-44228) Vulnerability

CVE-2021-44228CRITICALbajo ataqueransomware06 oct 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2023-41892 - Craft CMS Remote Code Execution (RCE)

CVE-2023-41892CRITICAL06 oct 2023

Craft CMS Remote Code Execution vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 21

A tool for finding vulnerable libwebp(CVE-2023-4863)

CVE-2023-4863HIGHbajo ataque05 oct 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC★ 9

PoC of CVE-2023-42793

CVE-2023-42793CRITICALbajo ataqueransomware05 oct 2023

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RIESGO

abrir ↗

GitHub PoC

whoamins/CVE-2023-42793

CVE-2023-42793CRITICALbajo ataqueransomware05 oct 2023

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RIESGO

abrir ↗

GitHub PoC★ 15

https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt

CVE-2023-4911HIGHbajo ataque04 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 392

PoC for CVE-2023-4911

CVE-2023-4911HIGHbajo ataque04 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 167

CVE-2023-4911 proof of concept

CVE-2023-4911HIGHbajo ataque04 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC

Checker for CVE-2022-0441

CVE-2022-0441—03 oct 2023

MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation

60RIESGO

abrir ↗

GitHub PoC★ 39

A tool that checks if a TorchServe instance is vulnerable to CVE-2023-43654

CVE-2023-43654CRITICAL02 oct 2023

TorchServe Server-Side Request Forgery

75RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2023-36845 PoC script automates the PoC for CVE-2023-36845 targeting Juniper Networks Junos OS's J-Web component on EX and SRX Series devices. It exploits a PHP flaw, allowing remote modification of the PHPRC variable. Successful exploitation can lead to code injection and execution.

CVE-2023-36845CRITICALbajo ataque02 oct 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC★ 1

Analysis of WS_FTP CVE

CVE-2023-40044CRITICALbajo ataqueransomware02 oct 2023

WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

simrotion13/CVE-2023-36845

CVE-2023-36845CRITICALbajo ataque01 oct 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC★ 54

LuemmelSec/CVE-2023-29357

CVE-2023-29357CRITICALbajo ataqueransomware30 sep 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 6

navreet1425/CVE-2021-34621

CVE-2021-34621CRITICAL30 sep 2023

ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation

75RIESGO

abrir ↗

GitHub PoC★ 6

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129

CVE-2023-4863HIGHbajo ataque30 sep 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC★ 5

Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129

CVE-2023-4863HIGHbajo ataque29 sep 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC

jytmX/CVE-2021-24499

CVE-2021-24499—29 sep 2023

Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution

50RIESGO

abrir ↗

GitHub PoC★ 46

JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit

CVE-2023-42793CRITICALbajo ataqueransomware29 sep 2023

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RIESGO

abrir ↗

GitHub PoC

go CVE-2023-24538 patch issue resolver - Kirkstone

CVE-2023-24538CRITICAL29 sep 2023

Backticks not treated as string delimiters in html/template

48RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2023-36845 - Juniper Firewall Remote code execution (RCE)

CVE-2023-36845CRITICALbajo ataque29 sep 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC

go CVE-2023-24538 patch issue resolver - Dunfell

CVE-2023-24538CRITICAL29 sep 2023

Backticks not treated as string delimiters in html/template

48RIESGO

abrir ↗

GitHub PoC★ 41

MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit

CVE-2023-36884HIGHbajo ataqueransomware28 sep 2023

Windows Search Remote Code Execution Vulnerability

93RIESGO

abrir ↗

GitHub PoC★ 3

PoC for Stored XSS (CVE-2023-43770) Vulnerability

CVE-2023-43770MEDIUMbajo ataque28 sep 2023

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craft

75RIESGO

abrir ↗

GitHub PoC★ 34

A Proof-Of-Concept for the CVE-2023-43770 vulnerability.

CVE-2023-43770MEDIUMbajo ataque27 sep 2023

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craft

75RIESGO

abrir ↗

GitHub PoC★ 1

halencarjunior/CVE-2023-36845

CVE-2023-36845CRITICALbajo ataque27 sep 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.