Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.743 exploits

GitHub PoC★ 2

Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm

CVE-2020-3580MEDIUMbajo ataqueransomware15 jul 2022

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

100RIESGO

abrir ↗

GitHub PoC★ 12

Just simple PoC for the Atlassian Jira exploit. Provides code execution for unauthorised user on a server.

CVE-2022-26134CRITICALbajo ataqueransomware15 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 14

rbowes-r7/unrar-cve-2022-30333-poc

CVE-2022-30333HIGHbajo ataqueransomware15 jul 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RIESGO

abrir ↗

GitHub PoC

supportingmx/cve-2021-4034

CVE-2021-4034HIGHbajo ataque15 jul 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 1

Lay0us/CVE-2022-0848-RCE

CVE-2022-0848CRITICAL15 jul 2022

OS Command Injection in part-db/part-db

60RIESGO

abrir ↗

GitHub PoC

CVE-2021-46422_PoC

CVE-2021-46422—14 jul 2022

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-26134-PoC

CVE-2022-26134CRITICALbajo ataqueransomware14 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 2

This is a python script that can be used with Shodan CLI to mass hunting Confluence Servers vulnerable to CVE-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware12 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 1

kmahyyg/CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque12 jul 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 1

GILANG - Exploiter for CVE-2021-25094

CVE-2021-25094—10 jul 2022

Tatsu < 3.3.12 - Unauthenticated RCE

60RIESGO

abrir ↗

GitHub PoC★ 1

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

CVE-2009-4049—10 jul 2022

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows loca

23RIESGO

abrir ↗

GitHub PoC

Tatsu Plugin ZIP File add_custom_font unrestricted upload

CVE-2021-25094—10 jul 2022

Tatsu < 3.3.12 - Unauthenticated RCE

60RIESGO

abrir ↗

GitHub PoC★ 1

confluence rce

CVE-2022-26134CRITICALbajo ataqueransomware08 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 3

Exploiting Android Vulnerability in ES File Explorer

CVE-2019-6447—08 jul 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC★ 2

BIGIP CVE-2020-5902 Exploit POC and automation scanning vulnerability

CVE-2020-5902CRITICALbajo ataqueransomware07 jul 2022

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 5

CodoForum v5.1 - File Upload Bypass to RCE (Authenticated) exploit code

CVE-2022-31854—07 jul 2022

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin

50RIESGO

abrir ↗

GitHub PoC★ 2

f4yd4-s3c/cve-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware06 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 24

Redis 沙盒逃逸（CVE-2022-0543）POC&EXP

CVE-2022-0543CRITICALbajo ataque06 jul 2022

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific

100RIESGO

abrir ↗

GitHub PoC

mq_notify: double sock_put()

CVE-2017-11176—05 jul 2022

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr

23RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-29464 Exploit

CVE-2022-29464CRITICALbajo ataqueransomware05 jul 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-35513 | blink1-pass-decrypt

CVE-2022-35513—05 jul 2022

The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.

23RIESGO

abrir ↗

GitHub PoC★ 29

Atlassian Confluence (CVE-2022-26134) - Unauthenticated Remote code execution (RCE)

CVE-2022-26134CRITICALbajo ataqueransomware05 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 3

Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE).

CVE-2022-26134CRITICALbajo ataqueransomware05 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 2

EXP for Spring4Shell(CVE-2022-22965)

CVE-2022-22965CRITICALbajo ataque05 jul 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC★ 13

TheL1ghtVn/CVE-2022-30333-PoC

CVE-2022-30333HIGHbajo ataqueransomware05 jul 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RIESGO

abrir ↗

GitHub PoC★ 29

An eBPF detection program for CVE-2022-0847

CVE-2022-0847HIGHbajo ataque05 jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 2

exp of CVE-2022-0847

CVE-2022-0847HIGHbajo ataque05 jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 2

exp of CVE-2022-0847

CVE-2022-0847HIGHbajo ataque05 jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC

CVE-2022-1388, bypassing iControl REST authentication

CVE-2022-1388CRITICALbajo ataqueransomware04 jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 30

POC exploit for CVE-2015-10141

CVE-2015-10141CRITICAL04 jul 2022

Xdebug Remote Debugger Unauthenticated OS Command Execution

63RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.