Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.743 exploits

GitHub PoC★ 115

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.

CVE-2022-36446—11 ago 2022

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

60RIESGO

abrir ↗

GitHub PoC

Silencecyber/cve-2021-4034

CVE-2021-4034HIGHbajo ataque11 ago 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 25

Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101)

CVE-2022-31101HIGH09 ago 2022

SQL Injection in prestashop/blockwishlist

61RIESGO

abrir ↗

GitHub PoC★ 4

PoC for GLPI CVE-2022-31061

CVE-2022-31061CRITICAL09 ago 2022

SQL injection on login page in GLPI

60RIESGO

abrir ↗

GitHub PoC★ 1

vesperp/CVE-2021-20038-SonicWall-RCE

CVE-2021-20038CRITICALbajo ataqueransomware08 ago 2022

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows

100RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2021-4034.

CVE-2021-4034HIGHbajo ataque08 ago 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

CVE-2007-2447 exploit written in python to get reverse shell

CVE-2007-2447—07 ago 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC

PHPMailer < 5.2.18 Remote Code Execution

CVE-2016-10033CRITICALbajo ataque05 ago 2022

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RIESGO

abrir ↗

GitHub PoC★ 6

Webkit (Safari) - Exploit

CVE-2022-22620HIGHbajo ataque04 ago 2022

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS

76RIESGO

abrir ↗

GitHub PoC

aweiiy/CVE-2021-43617

CVE-2021-43617—03 ago 2022

Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Val

28RIESGO

abrir ↗

GitHub PoC★ 3

LY613313/CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque03 ago 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 169

海康威视RCE漏洞批量检测和利用工具

CVE-2021-36260CRITICALbajo ataque03 ago 2022

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RIESGO

abrir ↗

GitHub PoC★ 5

Exploit to capitalize on vulnerability CVE-2020-2038.

CVE-2020-2038HIGH03 ago 2022

PAN-OS: OS command injection vulnerability in the management web interface

78RIESGO

abrir ↗

GitHub PoC

Apache Log4j is a logging tool written in Java. This paper focuses on what is Log4j and log4shell vulnerability and how it works, how it affects the victim, and how can this be mitigated

CVE-2021-44228CRITICALbajo ataqueransomware02 ago 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC

This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP 59777 port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the vulnerability. Download the PDF and enjoy !!! Cheers !!!

CVE-2019-6447—02 ago 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC★ 4

r4x0r1337/-CVE-2022-29464

CVE-2022-29464CRITICALbajo ataqueransomware01 ago 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 2

A Fullstack Academy Cybersecurity project examining the full cycle of the Follina (CVE-2022-30190) vulnerability, from exploit to detection and defense.

CVE-2022-30190HIGHbajo ataqueransomware01 ago 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

COMPILED

CVE-2022-0847HIGHbajo ataque01 ago 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC

xpgdgit/CVE-2014-3120

CVE-2014-3120HIGHbajo ataque01 ago 2022

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut

100RIESGO

abrir ↗

GitHub PoC★ 1

Script en python sobre la vulnerabilidad CVE-2021-4034

CVE-2021-4034HIGHbajo ataque01 ago 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

xpgdgit/CVE-2015-5531

CVE-2015-5531—01 ago 2022

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RIESGO

abrir ↗

GitHub PoC

PoC exploit for CVE-2017-1000251 (modified)

CVE-2017-1000251—31 jul 2022

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RIESGO

abrir ↗

GitHub PoC★ 7

CVE-2022-21661 exp for Elementor custom skin.

CVE-2022-21661HIGH31 jul 2022

SQL injection in WordPress

78RIESGO

abrir ↗

GitHub PoC★ 15

Confluence Hardcoded Password POC

CVE-2022-26138CRITICALbajo ataque30 jul 2022

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th

100RIESGO

abrir ↗

GitHub PoC★ 2

Script to exploit CVE-2018-1042 in order to do internal port scans.

CVE-2018-1042—30 jul 2022

Moodle 3.x has Server Side Request Forgery in the filepicker.

28RIESGO

abrir ↗

GitHub PoC★ 25

「💥」CVE-2022-33891 - Apache Spark Command Injection

CVE-2022-33891HIGHbajo ataque30 jul 2022

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

GitHub PoC

xpgdgit/CVE-2015-1427

CVE-2015-1427CRITICALbajo ataque29 jul 2022

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s

100RIESGO

abrir ↗

GitHub PoC★ 78

wo ee cve-2022-2185 gitlab authenticated rce

CVE-2022-2185CRITICAL29 jul 2022

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

85RIESGO

abrir ↗

GitHub PoC★ 3

Atlassian Confluence Server and Data Center: CVE-2022-26138

CVE-2022-26138CRITICALbajo ataque28 jul 2022

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th

100RIESGO

abrir ↗

GitHub PoC★ 1

libSSH-Authentication-Bypass

CVE-2018-10933CRITICAL28 jul 2022

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.