Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados

34.679CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.812 exploits

GitHub PoC★ 4

A "Creation of Temporary Files in Directory with Insecure Permissions" vulnerability in PrintixService.exe, in Printix's "Printix Secure Cloud Print Management", Version 1.3.1106.0 and below allows any logged in user to elevate any executable or file to the SYSTEM context. This is achieved by exploiting race conditions in the Installer.

CVE-2022-25090—02 mar 2022

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure

28RIESGO

GitHub PoC★ 223

CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque02 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

GitHub PoC

Tools for get offsets and adding patch for support i386

CVE-2018-1000001—01 mar 2022

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before th

43RIESGO

GitHub PoC★ 15

Zabbix - SAML SSO Authentication Bypass

CVE-2022-23131CRITICALbajo ataque28 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC★ 1

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

CVE-2019-2215HIGHbajo ataque28 feb 2022

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RIESGO

GitHub PoC★ 47

Test whether a container environment is vulnerable to container escapes via CVE-2022-0492

CVE-2022-0492HIGHbajo ataque28 feb 2022

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

86RIESGO

GitHub PoC

CVE-2022-24086 RCE

CVE-2022-24086CRITICALbajo ataque28 feb 2022

Adobe Commerce checkout improper input validation leads to remote code execution

100RIESGO

GitHub PoC

This script is intended to validate Apache Struts 2 vulnerability (CVE-2017-5638), AKA Struts-Shock.

CVE-2017-5638CRITICALbajo ataqueransomware28 feb 2022

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC

skentagon/CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware27 feb 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

GitHub PoC★ 1

Fa1c0n35/zabbix-cve-2022-23131

CVE-2022-23131CRITICALbajo ataque27 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC★ 303

PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"

CVE-2022-21971HIGHbajo ataque26 feb 2022

Windows Runtime Remote Code Execution Vulnerability

83RIESGO

GitHub PoC★ 8

Apache APISIX batch-requests RCE(CVE-2022-24112)

CVE-2022-24112CRITICALbajo ataque25 feb 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header

100RIESGO

GitHub PoC★ 1

Script to demonstrate the Grafana directory traversal exploit (CVE-2021-43798).

CVE-2021-43798HIGHbajo ataque25 feb 2022

Grafana path traversal

100RIESGO

GitHub PoC★ 8

POC for CVE-2022-24124

CVE-2022-24124—25 feb 2022

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as d

50RIESGO

GitHub PoC★ 2

pykiller/CVE-2022-23131

CVE-2022-23131CRITICALbajo ataque24 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC★ 1

trganda/CVE-2022-23131

CVE-2022-23131CRITICALbajo ataque24 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC★ 8

Zabbix SSO Bypass

CVE-2022-23131CRITICALbajo ataque23 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC★ 2

mxypoo/CVE-2016-3116-DropbearSSH

CVE-2016-3116—22 feb 2022

CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-c

28RIESGO

GitHub PoC★ 29

cve-2022-23131

CVE-2022-23131CRITICALbajo ataque22 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC★ 1

TheJoyOfHacking/dirkjanm-CVE-2020-1472

CVE-2020-1472MEDIUMbajo ataqueransomware22 feb 2022

Netlogon Elevation of Privilege Vulnerability

100RIESGO

GitHub PoC

TheJoyOfHacking/SecuraBV-CVE-2020-1472

CVE-2020-1472MEDIUMbajo ataqueransomware22 feb 2022

Netlogon Elevation of Privilege Vulnerability

100RIESGO

GitHub PoC★ 43

CVE-2022-24112：Apache APISIX apisix/batch-requests RCE

CVE-2022-24112CRITICALbajo ataque22 feb 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header

100RIESGO

GitHub PoC

Apache APISIX apisix/batch-requests RCE

CVE-2022-24112CRITICALbajo ataque22 feb 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header

100RIESGO

GitHub PoC

CVE-2019-15107 Webmin 1.920 RCE

CVE-2019-15107CRITICALbajo ataqueransomware21 feb 2022

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

GitHub PoC★ 1

poc

CVE-2022-23131CRITICALbajo ataque21 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC★ 35

CVE-2022-24086 about Magento RCE

CVE-2022-24086CRITICALbajo ataque20 feb 2022

Adobe Commerce checkout improper input validation leads to remote code execution

100RIESGO

GitHub PoC★ 3

An exploit for CVE-2020-6418 implementing a SHELF Loader. Published as part of Tmp.0ut volume 2

CVE-2020-6418HIGHbajo ataque19 feb 2022

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru

100RIESGO

GitHub PoC★ 3

1mxml/CVE-2022-23131

CVE-2022-23131CRITICALbajo ataque18 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC

qq1549176285/CVE-2022-23131

CVE-2022-23131CRITICALbajo ataque18 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

GitHub PoC★ 95

cve-2022-23131 exp

CVE-2022-23131CRITICALbajo ataque18 feb 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.