Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados

34.597CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.727 exploits

GitHub PoC★ 6

Docker Breakout Checker and PoC via CAP_SYS_ADMIN and via user namespaces (CVE-2022-0492)

CVE-2022-0492HIGHbajo ataque18 feb 2023

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

86RIESGO

abrir ↗

GitHub PoC

reewardius/CVE-2022-31890

CVE-2022-31890CRITICAL18 feb 2023

SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb

48RIESGO

abrir ↗

GitHub PoC★ 2

Joomla! 未授权访问漏洞

CVE-2023-23752MEDIUMbajo ataque18 feb 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2023-23752 nuclei template

CVE-2023-23752MEDIUMbajo ataque18 feb 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2021-41773 vulnerable apache version 2.4.49 lab set-up.

CVE-2021-41773HIGHbajo ataqueransomware17 feb 2023

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2022-40032: Simple Task Managing System - 'login' and 'password' SQL Injection (Unauthenticated)

CVE-2022-40032CRITICAL16 feb 2023

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' paramet

68RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2022-40347: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection (Unauthenticated)

CVE-2022-40347CRITICAL16 feb 2023

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType

48RIESGO

abrir ↗

GitHub PoC

PaloAlto EXP（CVE-2017-15944）

CVE-2017-15944CRITICALbajo ataque15 feb 2023

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote

100RIESGO

abrir ↗

GitHub PoC

CVE-2023-0669 GoAnywhere MFT command injection vulnerability

CVE-2023-0669HIGHbajo ataqueransomware15 feb 2023

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RIESGO

abrir ↗

GitHub PoC★ 7

Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated) POC Exploit (CVE-2022-45701)

CVE-2022-45701HIGH15 feb 2023

Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.

53RIESGO

abrir ↗

GitHub PoC★ 2

poc

CVE-2023-0297CRITICAL15 feb 2023

Code Injection in pyload/pyload

85RIESGO

abrir ↗

GitHub PoC★ 6

Red Team utilities for setting up CWP CentOS 7 payload & reverse shell (Red Team 9 - CW2023)

CVE-2022-44877CRITICALbajo ataque15 feb 2023

100RIESGO

abrir ↗

GitHub PoC

yrkuo/CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware13 feb 2023

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 16

Dompdf RCE PoC Exploit - CVE-2022-28368

CVE-2022-28368—13 feb 2023

Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (

60RIESGO

abrir ↗

GitHub PoC★ 27

CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit

CVE-2022-44268MEDIUM13 feb 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

GitHub PoC★ 12

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit

CVE-2023-21608HIGHbajo ataque13 feb 2023

Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

83RIESGO

abrir ↗

GitHub PoC★ 4

Bash Script for Checking Command Injection Vulnerability on CentOS Web Panel [CWP] (CVE-2022-44877)

CVE-2022-44877CRITICALbajo ataque11 feb 2023

100RIESGO

abrir ↗

GitHub PoC

PoC Exploit for RCE vulnerability in DedeCMS v6.1.9

CVE-2022-44118CRITICAL11 feb 2023

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

48RIESGO

abrir ↗

GitHub PoC★ 103

CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object.

CVE-2023-0669HIGHbajo ataqueransomware10 feb 2023

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RIESGO

abrir ↗

GitHub PoC

Bhathiya404/Exploiting-Stagefright-Vulnerability-CVE-2015-3864

CVE-2015-3864—09 feb 2023

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in A

60RIESGO

abrir ↗

GitHub PoC★ 10

( Wordpress Exploit ) Wordpress Multiple themes - Unauthenticated Arbitrary File Upload

CVE-2022-0316CRITICAL08 feb 2023

Multiple themes - Unauthenticated Arbitrary File Upload

48RIESGO

abrir ↗

GitHub PoC★ 2

Demonstration of the SQL injection vulnerability in wordpress 5.8.2

CVE-2022-21661HIGH08 feb 2023

SQL injection in WordPress

78RIESGO

abrir ↗

GitHub PoC★ 1

CVE 2021-44228 Proof-of-Concept. Log4Shell is an attack against Servers that uses vulnerable versions of Log4J.

CVE-2021-44228CRITICALbajo ataqueransomware08 feb 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 3

Below code takes advantage of a known vulnerability [Dirty COW (CVE-2016-5195)] 🔥

CVE-2016-5195HIGHbajo ataque08 feb 2023

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC★ 28

CVE-2022-22947注入哥斯拉内存马

CVE-2022-22947CRITICALbajo ataque07 feb 2023

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 1

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.

CVE-2020-5902CRITICALbajo ataqueransomware07 feb 2023

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 1

HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting (XSS) Vulnerability

CVE-2022-48311CRITICAL07 feb 2023

**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR

48RIESGO

abrir ↗

GitHub PoC

amitlttwo/CVE-2021-22986

CVE-2021-22986CRITICALbajo ataqueransomware07 feb 2023

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RIESGO

abrir ↗

GitHub PoC★ 8

Imagemagick CVE-2022-44268

CVE-2022-44268MEDIUM06 feb 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

GitHub PoC★ 53

ImageMagick LFI PoC [CVE-2022-44268]

CVE-2022-44268MEDIUM06 feb 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.