Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.951exploits catalogados

34.636CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.736VulnCheck XDB 8410Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.736 exploits

GitHub PoC★ 2

CVE-2018-19321

CVE-2018-19321HIGHbajo ataqueransomware07 ene 2023

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, X

71RIESGO

abrir ↗

GitHub PoC★ 26

Dell Driver EoP (CVE-2021-21551)

CVE-2021-21551HIGHbajo ataque07 ene 2023

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

98RIESGO

abrir ↗

GitHub PoC

POC Exploit for CVE-2022-44149

CVE-2022-44149HIGH06 ene 2023

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by

53RIESGO

abrir ↗

GitHub PoC★ 10

CVE-2022-44877 Centos Web Panel 7 Unauthenticated Remote Code Execution

CVE-2022-44877CRITICALbajo ataque06 ene 2023

100RIESGO

abrir ↗

GitHub PoC★ 103

numanturle/CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque05 ene 2023

100RIESGO

abrir ↗

GitHub PoC★ 5

Proof of concept for exploiting the Heartbeat Extension bug detailed in the CVE-2014-0160. :old_key: :unlock:

CVE-2014-0160HIGHbajo ataque05 ene 2023

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

abrir ↗

GitHub PoC★ 29

PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti <= 1.2.22

CVE-2022-46169CRITICALbajo ataque05 ene 2023

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC★ 12

Basic POC exploit for CVE-2022-46164

CVE-2022-46164CRITICAL04 ene 2023

Account takeover via prototype vulnerability

60RIESGO

abrir ↗

GitHub PoC

CVE-2021-4034 PoC

CVE-2021-4034HIGHbajo ataque04 ene 2023

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 1

Webmin < 1.290 / Usermin < 1.220 - Arbitrary file disclosure

CVE-2006-3392—04 ene 2023

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RIESGO

abrir ↗

GitHub PoC

ajith737/Dirty-Pipe-CVE-2022-0847-POCs

CVE-2022-0847HIGHbajo ataque04 ene 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC

User friendly Spring4Shell POC

CVE-2022-22965CRITICALbajo ataque03 ene 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC

A Proof of Concept for the CVE-2021-46398 flaw exploitation

CVE-2021-46398—03 ene 2023

A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor use

23RIESGO

abrir ↗

GitHub PoC★ 1

Trinadh465/frameworks_minikin_AOSP10_r33-CVE-2022-20473

CVE-2022-20473CRITICAL03 ene 2023

In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

48RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2018-16763 FuelCMS 1.4 Remote Code Execution, this version of FuelCMS is still vulnerable until now

CVE-2018-16763—03 ene 2023

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RIESGO

abrir ↗

GitHub PoC★ 3

Cacti Unauthenticated Command Injection

CVE-2022-46169CRITICALbajo ataque02 ene 2023

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC

Trinadh465/frameworks_minikin_AOSP10_r33_CVE-2022-20473

CVE-2022-20473CRITICAL02 ene 2023

In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

48RIESGO

abrir ↗

GitHub PoC

ryan412/CVE-2022-48197

CVE-2022-48197—02 ene 2023

Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, Tree

38RIESGO

abrir ↗

GitHub PoC★ 3

Cacti Unauthenticated Command Injection

CVE-2022-46169CRITICALbajo ataque02 ene 2023

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2020-17382 Windows 10 x64 2004 Build 19041.264 Exploit

CVE-2020-17382—01 ene 2023

The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).

23RIESGO

abrir ↗

GitHub PoC

philippedixon/CVE-2018-15473

CVE-2018-15473MEDIUM01 ene 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

abrir ↗

GitHub PoC

Exploit for CVE-2007-4560 (ClamAV Milter Sendmail 0.91.2 Remote Code Execution)

CVE-2007-4560—31 dic 2022

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command

60RIESGO

abrir ↗

GitHub PoC

sqsec/log4j2_CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware30 dic 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC

Dirty Pipe Kernel Vulnerability Exploit

CVE-2022-0847HIGHbajo ataque30 dic 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 19

The results of my small term paper on the topic of the Internet of Vulnerable Things and the exploit for CVE-2022-48194.

CVE-2022-48194HIGH29 dic 2022

TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a De

53RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-30190(follina)

CVE-2022-30190HIGHbajo ataqueransomware29 dic 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 11

Working Proof of Concept Exploit for CVE-2018-17463

CVE-2018-17463HIGHbajo ataque28 dic 2022

Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbit

100RIESGO

abrir ↗

GitHub PoC

Learn about the vulnerability known as PrintNightmare (CVE-2021-1675) and (CVE-2021-34527)

CVE-2021-1675HIGHbajo ataqueransomware28 dic 2022

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 102

CVE-2022-22965\Spring-Core-RCE核弹级别漏洞的rce图形化GUI一键利用工具，基于JavaFx开发，图形化操作更简单，提高效率。

CVE-2022-22965CRITICALbajo ataque28 dic 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC

Exploit i used in HTB

CVE-2007-2447—27 dic 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.