Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.743 exploits

GitHub PoC

CVE-2022-1388, bypassing iControl REST authentication

CVE-2022-1388CRITICALbajo ataqueransomware04 jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 30

POC exploit for CVE-2015-10141

CVE-2015-10141CRITICAL04 jul 2022

Xdebug Remote Debugger Unauthenticated OS Command Execution

63RIESGO

abrir ↗

GitHub PoC

CVE-2022-24706 POC exploit

CVE-2022-24706CRITICALbajo ataque04 jul 2022

Remote Code Execution Vulnerability in Packaging

100RIESGO

abrir ↗

GitHub PoC

The above investigation of the ES file browser security weakness allows us to see the issue in its entirety

CVE-2019-6447—03 jul 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC★ 13

CVE-2022-2185 poc

CVE-2022-2185CRITICAL02 jul 2022

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

85RIESGO

abrir ↗

GitHub PoC★ 5

Ruby反序列化命令执行漏洞（CVE-2019-5420）-vulfocus通关版

CVE-2019-5420—02 jul 2022

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RIESGO

abrir ↗

GitHub PoC★ 1

PoC for exploiting CVE-2022-1388 on BIG IP F5

CVE-2022-1388CRITICALbajo ataqueransomware01 jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 4

Apache Tomcat DoS (CVE-2022-29885) Exploit

CVE-2022-29885—01 jul 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RIESGO

abrir ↗

GitHub PoC

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

CVE-2022-0847HIGHbajo ataque30 jun 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 134

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

CVE-2021-23017—30 jun 2022

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t

35RIESGO

abrir ↗

GitHub PoC★ 5

Apache Tomcat CVE-2022-29885

CVE-2022-29885—30 jun 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RIESGO

abrir ↗

GitHub PoC★ 1

vesperp/CVE-2021-42237-SiteCore-XP

CVE-2021-42237CRITICALbajo ataqueransomware30 jun 2022

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it

100RIESGO

abrir ↗

GitHub PoC★ 41

CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-34473CRITICALbajo ataqueransomware29 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 8

This is exploit of CVE-2022-30190 on PowerPoint.

CVE-2022-30190HIGHbajo ataqueransomware29 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

PoC for exploiting CVE-2022-26134 on Confluence

CVE-2022-26134CRITICALbajo ataqueransomware29 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 5

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

CVE-2015-2291HIGHbajo ataqueransomware28 jun 2022

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all

71RIESGO

abrir ↗

GitHub PoC★ 1

Mass Exploit for CVE 2022-29464 on Carbon

CVE-2022-29464CRITICALbajo ataqueransomware28 jun 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC

A docker container vulnerable to Shellshock - CVE-2014-6271

CVE-2014-6271CRITICALbajo ataque27 jun 2022

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

abrir ↗

GitHub PoC★ 2

Follina (CVE-2022-30190) proof-of-concept

CVE-2022-30190HIGHbajo ataqueransomware27 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 9

ProxyLogon (CVE-2021-26855+CVE-2021-27065) Exchange Server RCE (SSRF->GetWebShell)

CVE-2021-26855CRITICALbajo ataqueransomware27 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

CVE-2021-26855

CVE-2021-26855CRITICALbajo ataqueransomware27 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 16

Nacos下Spring-Cloud-Gateway CVE-2022-22947利用环境

CVE-2022-22947CRITICALbajo ataque25 jun 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 85

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

CVE-2021-21551HIGHbajo ataque25 jun 2022

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

98RIESGO

abrir ↗

GitHub PoC

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)

CVE-2021-3156HIGHbajo ataque24 jun 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC

CVE-2021-26855

CVE-2021-26855CRITICALbajo ataqueransomware24 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

Cisco ASA XSS CVE-2020-3580

CVE-2020-3580MEDIUMbajo ataqueransomware24 jun 2022

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

100RIESGO

abrir ↗

GitHub PoC★ 2

Atlassian Confluence OGNL Injection Remote Code Execution (RCE) Vulnerability (CVE-2022-26134)

CVE-2022-26134CRITICALbajo ataqueransomware24 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 1

cyb3rpeace/CVE-2021-34527

CVE-2021-34527HIGHbajo ataqueransomware24 jun 2022

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

[Python/Shell] - Tested in HackTheBox - Shocker (Easy) CVE-2014-6271

CVE-2014-6271CRITICALbajo ataque23 jun 2022

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

abrir ↗

GitHub PoC★ 4

[PoC] Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE)

CVE-2022-26134CRITICALbajo ataqueransomware21 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.