Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.496exploits catalogados
34.964CVEs con explotación pública
24.695probados en laboratorio
13.937 exploits
GitHub PoC2
A PoC exploit for CVE-2021-38647 RCE in OMI
CVE-2021-38647CRITICALbajo ataqueransomware16 sep 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC233
Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)
CVE-2021-38647CRITICALbajo ataqueransomware16 sep 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC20
OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research team, specifically CVE-2021-38647.
CVE-2021-38647CRITICALbajo ataqueransomware16 sep 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC9
quynhle7821/CVE-2021-2302
CVE-2021-2302CRITICAL16 sep 2021
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). Supported
48RIESGO
abrir
GitHub PoC6
CVE-2021-2456
CVE-2021-2456CRITICAL16 sep 2021
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ana
70RIESGO
abrir
GitHub PoC5
CVE-2021-38647 AKA "OMIGOD" vulnerability in Windows OMI
CVE-2021-38647CRITICALbajo ataqueransomware15 sep 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC10
CVE-2021-33766-poc
CVE-2021-33766HIGHbajo ataque15 sep 2021
Microsoft Exchange Server Information Disclosure Vulnerability
100RIESGO
abrir
GitHub PoC824
CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
CVE-2021-40444HIGHbajo ataqueransomware15 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
jaysharma786/CVE-2021-29003
CVE-2021-2900315 sep 2021
Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacter
35RIESGO
abrir
GitHub PoC8
CVE-2021-38647 POC for RCE
CVE-2021-38647CRITICALbajo ataqueransomware15 sep 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC19
k8gege/CVE-2021-40444
CVE-2021-40444HIGHbajo ataqueransomware14 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
Malicious document builder for CVE-2021-40444
CVE-2021-40444HIGHbajo ataqueransomware14 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC3
CVE-2018-15473 Exploit
CVE-2018-15473MEDIUM14 sep 2021
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati
70RIESGO
abrir
GitHub PoC8
CVE-2021-40875: Tools to Inspect Gurock Testrail Servers for Vulnerabilities related to CVE-2021-40875.
CVE-2021-4087513 sep 2021
Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat ac
50RIESGO
abrir
GitHub PoC1
POC for CVE-2021-40444
CVE-2021-40444HIGHbajo ataqueransomware13 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC168
This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit
CVE-2021-40444HIGHbajo ataqueransomware12 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
W1kyri3/Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx
CVE-2021-40444HIGHbajo ataqueransomware12 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
Reverse engineering the "A Letter Before Court 4.docx" malicious files exploting cve-2021-40444
CVE-2021-40444HIGHbajo ataqueransomware12 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
CVE-2021-21972 vCenter-6.5-7.0 RCE POC
CVE-2021-21972CRITICALbajo ataqueransomware12 sep 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir
GitHub PoC16
Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme.
CVE-2021-2449912 sep 2021
Workreap theme < 2.2.2 - Unauthenticated Upload Leading to Remote Code Execution
50RIESGO
abrir
GitHub PoC1
2021 kernel vulnerability in Ubuntu.
CVE-2021-3493HIGHbajo ataque12 sep 2021
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RIESGO
abrir
GitHub PoC
Strapi Remote Code Execution
CVE-2019-1960911 sep 2021
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c
35RIESGO
abrir
GitHub PoC11
A malicious .cab creation tool for CVE-2021-40444
CVE-2021-40444HIGHbajo ataqueransomware11 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC4
fengjixuchui/CVE-2021-40444-docx-Generate
CVE-2021-40444HIGHbajo ataqueransomware11 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
sbladiamond/CVE-2021-3156
CVE-2021-3156HIGHbajo ataque11 sep 2021
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir
GitHub PoC
KnoooW/CVE-2021-40444-docx-Generate
CVE-2021-40444HIGHbajo ataqueransomware11 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC
Hunting CVE-2018-13379
CVE-2018-13379CRITICALbajo ataqueransomware11 sep 2021
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.
100RIESGO
abrir
GitHub PoC1
koharin/CVE-2020-0041
CVE-2020-0041HIGHbajo ataque10 sep 2021
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could
71RIESGO
abrir
GitHub PoC1
CVE-2021-40444 Sample
CVE-2021-40444HIGHbajo ataqueransomware10 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC1743
CVE-2021-40444 PoC
CVE-2021-40444HIGHbajo ataqueransomware10 sep 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir
anteriorpágina 359 / 465siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.