Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados

40.258CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

17.831 exploits

GitHub PoC

GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization

CVE-2024-6330CRITICAL20 nov 2024

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

48RIESGO

abrir ↗

GitHub PoC

CVE-2023-28354

CVE-2023-28354CRITICAL20 nov 2024

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against aff

48RIESGO

abrir ↗

GitHub PoC★ 1

PANW NGFW CVE-2024-0012

CVE-2024-0012CRITICALbajo ataqueransomware20 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

abrir ↗

GitHub PoC

POC for CVE-2024-10924 written in Python

CVE-2024-10924CRITICAL20 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC★ 20

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

CVE-2024-0012CRITICALbajo ataqueransomware19 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

abrir ↗

GitHub PoC★ 143

WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

CVE-2024-49039HIGHbajo ataqueransomware19 nov 2024

Windows Task Scheduler Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC★ 24

watchtowrlabs/palo-alto-panos-cve-2024-0012

CVE-2024-0012CRITICALbajo ataqueransomware19 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

abrir ↗

GitHub PoC

ubaydev/CVE-2024-10508

CVE-2024-10508CRITICAL19 nov 2024

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

48RIESGO

abrir ↗

GitHub PoC★ 45

PAN-OS auth bypass + RCE

CVE-2024-9474MEDIUMbajo ataqueransomware19 nov 2024

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RIESGO

abrir ↗

GitHub PoC

wudidwo/CVE-2017-12615-poc

CVE-2017-12615HIGHbajo ataqueransomware19 nov 2024

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

abrir ↗

GitHub PoC★ 2

Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (npm:bower)

CVE-2024-42640CRITICAL19 nov 2024

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Explo

75RIESGO

abrir ↗

GitHub PoC★ 20

Exploits Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924).

CVE-2024-10924CRITICAL19 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC

Simple Python script

CVE-2024-10924CRITICAL19 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC★ 8

WARNING: This is a vulnerable application to test the exploit for the Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924). Run it at your own risk!

CVE-2024-10924CRITICAL18 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

CVE-2024-3806CRITICAL18 nov 2024

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

48RIESGO

abrir ↗

GitHub PoC

Andriod binder bug record

CVE-2019-2215HIGHbajo ataque18 nov 2024

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

abrir ↗

GitHub PoC★ 2

Relais 2FA <= 1.0 - Authentication Bypass

CVE-2024-10245CRITICAL17 nov 2024

Relais 2FA <= 1.0 - Authentication Bypass

48RIESGO

abrir ↗

GitHub PoC★ 2

Vuln disclosure for XOne app

CVE-2024-54820CRITICAL17 nov 2024

XOne Web Monitor v02.10.2024.530 framework 1.0.4.9 was discovered to contain a SQL injection vulnerability in the login

48RIESGO

abrir ↗

GitHub PoC★ 2

WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability

CVE-2024-8856CRITICAL16 nov 2024

Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

85RIESGO

abrir ↗

GitHub PoC★ 9

CVE-2024-10914 is a critical command injection vulnerability affecting several legacy D-Link Network Attached Storage (NAS) devices.

CVE-2024-10914CRITICAL16 nov 2024

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

85RIESGO

abrir ↗

GitHub PoC★ 1

jesicatjan/WordPress-NotificationX-CVE-2024-1698

CVE-2024-1698CRITICAL16 nov 2024

NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection

85RIESGO

abrir ↗

GitHub PoC★ 3

PoC for Windows' IPv6 CVE-2024-38063

CVE-2024-38063CRITICAL16 nov 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC

这是安徽大学 “漏洞分析实验”（大三秋冬）期中作业归档。完整文档位于https://testgames.me/2024/11/10/cve-2021-44228/

CVE-2021-44228CRITICALbajo ataqueransomware15 nov 2024

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2024-54761 PoC

CVE-2024-54761MEDIUM15 nov 2024

BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.

33RIESGO

abrir ↗

GitHub PoC★ 12

Proof of concept for CVE-2024-54756, a vulnerability I found in GZDoom's ZScript scripting engine.

CVE-2024-54756CRITICAL15 nov 2024

A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to exe

48RIESGO

abrir ↗

GitHub PoC★ 1

这是一个D-Link rce漏洞检测程序

CVE-2024-10914CRITICAL15 nov 2024

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

85RIESGO

abrir ↗

GitHub PoC

p33d/Palo-Alto-Expedition-Remote-Code-Execution-Exploit-CVE-2024-5910-CVE-2024-9464

CVE-2024-5910CRITICALbajo ataque15 nov 2024

Expedition: Missing Authentication Leads to Admin Account Takeover

100RIESGO

abrir ↗

GitHub PoC★ 1

common-user-management is a robust Spring Boot application featuring user management services designed to control user access dynamically. There is a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture. This endpoint allows file uploads without proper validation or restrictions leads to (RCE)

CVE-2024-52302HIGH14 nov 2024

common-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)

41RIESGO

abrir ↗

GitHub PoC

Fortigate SSL VPN buffer overflow exploit

CVE-2023-27997CRITICALbajo ataqueransomware14 nov 2024

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi

100RIESGO

abrir ↗

GitHub PoC★ 2

Bash script to automate Local File Inclusion (LFI) attacks on aiohttp server version 3.9.1.

CVE-2024-23334MEDIUM14 nov 2024

aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

70RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.