Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.743 exploits

GitHub PoC

CVE-2022-1388 | F5 - Big IP Pre Auth RCE via '/mgmt/tm/util/bash' endpoint

CVE-2022-1388CRITICALbajo ataqueransomware21 jun 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC

cve-2021-22005vcenter任意文件上传漏洞，可直接上传冰蝎

CVE-2021-22005CRITICALbajo ataqueransomware21 jun 2022

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RIESGO

abrir ↗

GitHub PoC★ 3

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection

CVE-2021-46422—20 jun 2022

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-1388 | F5 - Big IP Pre Auth RCE via '/mgmt/tm/util/bash' endpoint

CVE-2022-1388CRITICALbajo ataqueransomware20 jun 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC

Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit

CVE-2019-17662—19 jun 2022

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RIESGO

abrir ↗

GitHub PoC★ 154

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

CVE-2022-22965CRITICALbajo ataque19 jun 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC★ 14

「💥」CVE-2022-26134 - Confluence Pre-Auth RCE

CVE-2022-26134CRITICALbajo ataqueransomware19 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 1

wlensinas/CVE-2002-1614

CVE-2002-1614—18 jun 2022

Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.

23RIESGO

abrir ↗

GitHub PoC

unauthorized RcE exploit for webnin < 1.920

CVE-2019-15107CRITICALbajo ataqueransomware17 jun 2022

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

abrir ↗

GitHub PoC

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.

CVE-2021-41773HIGHbajo ataqueransomware17 jun 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 86

Windows Network File System Crash PoC

CVE-2022-26937CRITICAL17 jun 2022

Windows Network File System Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC

🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.

CVE-2025-55182CRITICALbajo ataqueransomware17 jun 2022

A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1

100RIESGO

abrir ↗

GitHub PoC

0xF331-D3AD/CVE-2012-2982

CVE-2012-2982—16 jun 2022

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RIESGO

abrir ↗

GitHub PoC

p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor

CVE-2017-7921CRITICALbajo ataque15 jun 2022

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

abrir ↗

GitHub PoC

follina zero day vulnerability to help Microsoft to mitigate the attack

CVE-2022-30190HIGHbajo ataqueransomware15 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 31

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

CVE-2022-30190HIGHbajo ataqueransomware15 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

notherealhazard/follina-CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware15 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

This repository is developed to understand CVE-2019-6447

CVE-2019-6447—15 jun 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC

ernestak/Sigma-Rule-for-CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware14 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

ernestak/CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware14 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-22620: Use-after-free in Safari

CVE-2022-22620HIGHbajo ataque14 jun 2022

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS

76RIESGO

abrir ↗

GitHub PoC★ 1

I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits

CVE-2022-24706CRITICALbajo ataque14 jun 2022

Remote Code Execution Vulnerability in Packaging

100RIESGO

abrir ↗

GitHub PoC

WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm

CVE-2017-10271HIGHbajo ataqueransomware14 jun 2022

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RIESGO

abrir ↗

GitHub PoC★ 2

An Unofficial Patch Follina CVE-2022-30190 (patch) by micrisoft Guidelines.

CVE-2022-30190HIGHbajo ataqueransomware13 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina

CVE-2022-30190HIGHbajo ataqueransomware13 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-30525 POC

CVE-2022-30525CRITICALbajo ataque13 jun 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection

CVE-2022-26134CRITICALbajo ataqueransomware13 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 106

PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.

CVE-2022-26809CRITICAL13 jun 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 1

A OS Command Injection Vulnerability in the CGI Program of Zyxel

CVE-2022-30525CRITICALbajo ataque12 jun 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 2

seymanurmutlu/CVE-2022-24086-CVE-2022-24087

CVE-2022-24086CRITICALbajo ataque12 jun 2022

Adobe Commerce checkout improper input validation leads to remote code execution

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.