Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.496exploits catalogados

34.964CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8510Nuclei 4239Metasploit 3468✓ solo verificadosrecientes populares riesgo

13.937 exploits

GitHub PoC★ 1

masahiro331/CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware05 oct 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 13

Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49.

CVE-2021-41773HIGHbajo ataqueransomware05 oct 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 6

Poc.py

CVE-2021-41773HIGHbajo ataqueransomware05 oct 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 1

bypass all stages of the password reset flow

CVE-2021-27651CRITICAL05 oct 2021

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to byp

75RIESGO

abrir ↗

GitHub PoC★ 25

Atlassian Jira Server/Data Center 8.4.0 - Arbitrary File read (CVE-2021-26086)

CVE-2021-26086MEDIUMbajo ataque05 oct 2021

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path tr

100RIESGO

abrir ↗

GitHub PoC

POC: CVE-2019-12840 (Authenticated RCE - Webmin Package Updates)

CVE-2019-12840—05 oct 2021

In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root pr

60RIESGO

abrir ↗

GitHub PoC★ 39

lorddemon/CVE-2021-41773-PoC

CVE-2021-41773HIGHbajo ataqueransomware05 oct 2021

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC

Opensitoo/cve-2020-0796

CVE-2020-0796CRITICALbajo ataqueransomware04 oct 2021

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC★ 11

CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)

CVE-2021-21972CRITICALbajo ataqueransomware03 oct 2021

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RIESGO

abrir ↗

GitHub PoC★ 9

H0j3n/CVE-2021-40444

CVE-2021-40444HIGHbajo ataqueransomware03 oct 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2018-15961 — ᴀᴅᴏʙᴇ ᴄᴏʟᴅғᴜsɪᴏɴ (ʀᴄᴇ)

CVE-2018-15961CRITICALbajo ataque03 oct 2021

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr

100RIESGO

abrir ↗

GitHub PoC★ 2

Exploit code for CVE-2007-2447 written in Python3.

CVE-2007-2447—03 oct 2021

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC★ 7

Proof On Concept — Pulse Secure CVE-2021-22893

CVE-2021-22893CRITICALbajo ataqueransomware03 oct 2021

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windo

90RIESGO

abrir ↗

GitHub PoC★ 1

puckiestyle/CVE-2021-3493

CVE-2021-3493HIGHbajo ataque02 oct 2021

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RIESGO

abrir ↗

GitHub PoC★ 2

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)

CVE-2019-17662—02 oct 2021

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RIESGO

abrir ↗

GitHub PoC

wdjcy/CVE-2021-26084

CVE-2021-26084CRITICALbajo ataqueransomware02 oct 2021

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 16

POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)

CVE-2021-34523CRITICALbajo ataqueransomware02 oct 2021

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 22

the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

CVE-2021-22005CRITICALbajo ataqueransomware02 oct 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RIESGO

abrir ↗

GitHub PoC★ 1

daletoniris/CVE-2021-22555-esc-priv

CVE-2021-22555HIGHbajo ataque01 oct 2021

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RIESGO

abrir ↗

GitHub PoC

CloudMe CVE-2018-6892 POC

CVE-2018-6892—01 oct 2021

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RIESGO

abrir ↗

GitHub PoC★ 12

PoC for CVE-2021-3129 (Laravel)

CVE-2021-3129CRITICALbajo ataqueransomware01 oct 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 1

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.

CVE-2019-17662—01 oct 2021

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RIESGO

abrir ↗

GitHub PoC★ 12

Simple Serv-U CVE-2021-35211 PoC

CVE-2021-35211CRITICALbajo ataqueransomware30 sep 2021

Serv-U Remote Memory Escape Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 28

Cisco RV110w UPnP stack overflow

CVE-2021-34730CRITICAL30 sep 2021

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

53RIESGO

abrir ↗

GitHub PoC

CVE-2021-25162

CVE-2021-25162—29 sep 2021

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

28RIESGO

abrir ↗

GitHub PoC★ 5

This docx exploit uses res files inside Microsoft .docx file to execute malicious files. This exploit is related to CVE-2021-40444

CVE-2021-40444HIGHbajo ataqueransomware29 sep 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

漏洞复现与poc收集，CVE-2021-21975，cve-2021-22005，CVE-2021-26295，VMware vCenter任意文件读取

CVE-2021-21975HIGHbajo ataqueransomware29 sep 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RIESGO

abrir ↗

GitHub PoC

According to researchers with Rapid7, over 110,000 devices appear on internet, which run stable Samba versions, while 92,500 seem to run unstable Samba versions, for which there is no fix. The newest Samba models, including the models 4.6.x before 4.6.4, 4.5.x before 4.5.10 and 3.5.0 before 4.4.13, was impacted by this error. May 24, 2017, Samba released version 4.6.4, which fixes a serious remote code execution vulnerability, vulnerability number CVE-2017-7494, which affected Samba 3.5.0 onwards. Vulnerability number: CVE-2017-7494 Severity Rating: High Affected software: • Samba Version < 4.6.4 • Samba Version < 4.5.10 • Samba Version < 4.4.14 Unaffected software: • Samba Version = 4.6.4 • Samba Version = 4.5.10 • Samba Version = 4.4.14

CVE-2017-7494CRITICALbajo ataqueransomware29 sep 2021

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

abrir ↗

GitHub PoC★ 14

CrackerCat/CVE-2021-30632

CVE-2021-30632HIGHbajo ataque28 sep 2021

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c

83RIESGO

abrir ↗

GitHub PoC★ 37

rwincey/CVE-2021-22005

CVE-2021-22005CRITICALbajo ataqueransomware28 sep 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.