Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados

40.258CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

17.831 exploits

GitHub PoC

🚨 Just completed a detailed investigation for Event ID 193: "SOC231 - Cisco IOS XE Web UI ZeroDay (CVE-2023-20198)" via @LetsDefend.io. The attacker successfully bypassed authentication, gaining admin control over the device! Immediate containment was critical. Stay vigilant! 💻🔐

CVE-2023-20198CRITICALbajo ataque13 sep 2024

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

GitHub PoC

0xWhoami35/CVE-2024-4879

CVE-2024-4879CRITICALbajo ataque13 sep 2024

Jelly Template Injection Vulnerability in ServiceNow UI Macros

100RIESGO

GitHub PoC★ 2

Robocopsita/CVE-2022-0944_RCE_POC

CVE-2022-0944CRITICAL13 sep 2024

Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

48RIESGO

GitHub PoC

Event ID 229 Rule Name SOC262 ScreenConnect Authentication Bypass Exploitation Detected (CVE-2024-1709)

CVE-2024-1709CRITICALbajo ataqueransomware12 sep 2024

Authentication bypass using an alternate path or channel

100RIESGO

GitHub PoC

CVE-2024-8277 - 0Day Auto Exploit Authentication Bypass in WooCommerce Photo Reviews Plugin

CVE-2024-8277CRITICAL12 sep 2024

WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation

48RIESGO

GitHub PoC

🚨 New Incident Report Completed! 🚨 Just wrapped up "Event ID 268: SOC292 - Possible PHP Injection Detected (CVE-2024-4577)" on LetsDefend.io. This analysis involved investigating an attempted Command Injection targeting our PHP server. Staying ahead of these threats with continuous monitoring and swift containment! 🛡️

CVE-2024-4577CRITICALbajo ataqueransomware12 sep 2024

Argument Injection in PHP-CGI

100RIESGO

GitHub PoC

Old weaponized CVE-2022-1388 exploit.

CVE-2022-1388CRITICALbajo ataqueransomware12 sep 2024

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

GitHub PoC

Event ID 189 Rule Name SOC227 Microsoft SharePoint Server Elevation of Privilege Possible CVE-2023-29357 .. Exploitation

CVE-2023-29357CRITICALbajo ataqueransomware12 sep 2024

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RIESGO

GitHub PoC

pwning netconsd

CVE-2023-28753CRITICAL12 sep 2024

netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could

48RIESGO

GitHub PoC★ 2

phirojshah/CVE-2024-4577

CVE-2024-4577CRITICALbajo ataqueransomware12 sep 2024

Argument Injection in PHP-CGI

100RIESGO

GitHub PoC

My proof of concept for CVE-2019 Microsoft-Edge

CVE-2019-0567—11 sep 2024

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RIESGO

GitHub PoC

CVE Exploitation Reports: CVE-2007-3280, CVE-2017-0144, CVE-2019-0708

CVE-2019-0708CRITICALbajo ataqueransomware11 sep 2024

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

GitHub PoC★ 1

Powershell script that checks for cert padding in the Windows Registry and adds it if it does not exist. Meant to resolve the WinTrustVerify Vulnerability.

CVE-2013-3900MEDIUMbajo ataque11 sep 2024

WinVerifyTrust Signature Validation Vulnerability

75RIESGO

GitHub PoC★ 2

Spring Cloud Remote Code Execution

CVE-2024-37084CRITICAL11 sep 2024

CVE-2024-37084: Remote code execution in Spring Cloud Data Flow

60RIESGO

GitHub PoC

Log4J exploit CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware11 sep 2024

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

CVE Exploitation Reports: CVE-2007-3280, CVE-2017-0144, CVE-2019-0708

CVE-2017-0144HIGHbajo ataqueransomware11 sep 2024

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

GitHub PoC

OtisSymbos/CVE-2021-44228-Log4Shell-

CVE-2021-44228CRITICALbajo ataqueransomware11 sep 2024

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

carradolly/CVE-2015-8660

CVE-2015-8660—10 sep 2024

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

43RIESGO

GitHub PoC★ 5

CVE-2024-28000 Exploit for litespeed-cache =<6.3 allows Privilege Escalation with creation of administrator account

CVE-2024-28000CRITICAL10 sep 2024

WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability

75RIESGO

GitHub PoC★ 1

Scanning CVE-2024-4577 vulnerability with a url list.

CVE-2024-4577CRITICALbajo ataqueransomware10 sep 2024

Argument Injection in PHP-CGI

100RIESGO

GitHub PoC★ 1

KaoXx/CVE-2022-37706

CVE-2022-37706HIGH10 sep 2024

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and th

56RIESGO

GitHub PoC★ 3

Analysis , Demo exploit and poc about CVE-2024-37084

CVE-2024-37084CRITICAL10 sep 2024

CVE-2024-37084: Remote code execution in Spring Cloud Data Flow

60RIESGO

GitHub PoC

Python3 toolkit update

CVE-2017-0199HIGHbajo ataqueransomware10 sep 2024

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RIESGO

GitHub PoC★ 9

0xRoqeeb/sqlpad-rce-exploit-CVE-2022-0944

CVE-2022-0944CRITICAL10 sep 2024

Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

48RIESGO

GitHub PoC★ 1

Artemisxxx37/OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944CRITICAL10 sep 2024

Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

48RIESGO

GitHub PoC★ 1

CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6

CVE-2024-38063CRITICAL10 sep 2024

Windows TCP/IP Remote Code Execution Vulnerability

70RIESGO

GitHub PoC★ 3

JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation

CVE-2024-6624CRITICAL10 sep 2024

JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation

48RIESGO

GitHub PoC

LucasOneZ/CVE-2023-4966

CVE-2023-4966CRITICALbajo ataqueransomware09 sep 2024

Unauthenticated sensitive information disclosure

100RIESGO

GitHub PoC

CVE-2024-23897 분석

CVE-2024-23897CRITICALbajo ataqueransomware09 sep 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

GitHub PoC★ 4

CVE-2018-0834 full code exec

CVE-2018-0834—09 sep 2024

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot

35RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.