Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.066exploits catalogados

34.679CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.771VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.771 exploits

GitHub PoC

Vulnearability Report of the New Jersey official site

CVE-2019-11358—23 may 2022

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RIESGO

abrir ↗

GitHub PoC★ 1

Vulnearability Report of the New Jersey official site

CVE-2020-11022MEDIUM23 may 2022

jQuery has a potential XSS vulnerability

55RIESGO

abrir ↗

GitHub PoC★ 2

CVE 2005 exploit.Perl in Perl.

CVE-2005-3299—22 may 2022

PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to in

28RIESGO

abrir ↗

GitHub PoC

pashayogi/CVE-2020-7961-Mass

CVE-2020-7961CRITICALbajo ataque22 may 2022

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c

100RIESGO

abrir ↗

GitHub PoC★ 85

🍵 Gitea repository migration remote command execution exploit.

CVE-2022-30781—22 may 2022

Gitea before 1.16.7 does not escape git fetch remote.

60RIESGO

abrir ↗

GitHub PoC★ 2

A Simple bash script that patches the CVE-2022-0847 (dirty pipe) kernel vulnerability on Debian 11

CVE-2022-0847HIGHbajo ataque21 may 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 2

BabyTeam1024/CVE-2022-26318

CVE-2022-26318CRITICALbajo ataque21 may 2022

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulner

100RIESGO

abrir ↗

GitHub PoC★ 10

CVE-2021-4034 for single commcand

CVE-2021-4034HIGHbajo ataque21 may 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 29

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

CVE-2022-24706CRITICALbajo ataque20 may 2022

Remote Code Execution Vulnerability in Packaging

100RIESGO

abrir ↗

GitHub PoC★ 6

Verifed Proof of Concept on CVE-2022-24086

CVE-2022-24086CRITICALbajo ataque19 may 2022

Adobe Commerce checkout improper input validation leads to remote code execution

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-22965 Spring4Shell research & PoC

CVE-2022-22965CRITICALbajo ataque19 may 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC

CVE-2022-30525 Zyxel防火墙命令注入漏洞 POC&EXP

CVE-2022-30525CRITICALbajo ataque19 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 7

一个可单独、批量验证的脚本，也可以反弹shell

CVE-2022-22947CRITICALbajo ataque19 may 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

PoC for Dirty COW (CVE-2016-5195)

CVE-2016-5195HIGHbajo ataque19 may 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC★ 7

Exploit for CVE-2020-5844 (Pandora FMS v7.0NG.742) - Remote Code Execution

CVE-2020-5844—19 may 2022

index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators t

35RIESGO

abrir ↗

GitHub PoC

Franklin Fueling Systems Colibri Controller Module - Local File Inclusion

CVE-2021-46417—18 may 2022

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privilege

50RIESGO

abrir ↗

GitHub PoC★ 1

The Repository contains documents that explains the explotation of CVE-2016-5195

CVE-2016-5195HIGHbajo ataque18 may 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC★ 4

Simple python script to exploit CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

CVE-2022-30525CRITICALbajo ataque18 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 2

This repository is developed to analysis and understand DirtyPipe exploit CVE-2022-0847

CVE-2022-0847HIGHbajo ataque17 may 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust

CVE-2022-1388CRITICALbajo ataqueransomware17 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC

Wrin9/CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware16 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC

user16-et/cve-2021-21972_PoC

CVE-2021-21972CRITICALbajo ataqueransomware16 may 2022

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-30525 POC exploit

CVE-2022-30525CRITICALbajo ataque16 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC

Persistent XSS on 'last_known_version' field (My Settings)

CVE-2022-28598—16 may 2022

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-contro

23RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2022-30525（Zxyel 防火墙命令注入）的概念证明漏洞利用

CVE-2022-30525CRITICALbajo ataque16 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 61

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）注入哥斯拉内存马

CVE-2022-22947CRITICALbajo ataque16 may 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 1

Multithread Golang application

CVE-2022-21907CRITICAL16 may 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 7

Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

CVE-2008-0166—15 may 2022

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RIESGO

abrir ↗

GitHub PoC★ 14

An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell

CVE-2022-1388CRITICALbajo ataqueransomware15 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 1

Improved POC for CVE-2022-1388 that affects multiple F5 products.

CVE-2022-1388CRITICALbajo ataqueransomware15 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.