Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.679exploits catalogados
40.329CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.150Exploit-DB 24.488GitHub PoC 17.946VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
17.946 exploits
GitHub PoC★ 1
hapa3/CVE-2024-31666
An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon
48RIESGO
abrir ↗GitHub PoC
Ansible playbook for patching CVE-2024-3094
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 1
upgraded of BlueBourne CVE-2017-0785 to python3
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.
28RIESGO
abrir ↗GitHub PoC★ 4
A script to detect if xz is vulnerable - CVE-2024-3094
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC
spidygal/CVE-2024-3094-Nmap-NSE-script
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 2
Horizon-Software-Development/CVE-2024-3094
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC
More specific : Dirty COW (CVE-2016-5195)
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗GitHub PoC★ 1
brinhosa/CVE-2024-3094-One-Liner
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 147
An ssh honeypot with the XZ backdoor. CVE-2024-3094
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 26
Shell scripts to identify and fix installations of xz-utils affected by the CVE-2024-3094 vulnerability. Versions 5.6.0 and 5.6.1 of xz-utils are known to be vulnerable, and this script aids in detecting them and optionally downgrading to a stable, un-compromised version (5.4.6) or upgrading to latest version. Added Ansible Playbook
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 11
K8S and Docker Vulnerability Check for CVE-2024-3094
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 1
Checker for CVE-2024-3094 where malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code.
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 10
History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 1
efekaanakkar/CVE-2024-30998
SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrar
48RIESGO
abrir ↗GitHub PoC★ 8
This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698.
NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection
85RIESGO
abrir ↗GitHub PoC
OpensourceICTSolutions/xz_utils-CVE-2024-3094
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 4
Verify that your XZ Utils version is not vulnerable to CVE-2024-3094
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 72
Quick and dirty PoC for checking whether a vulnerable version of xz-utils is installed (CVE-2024-3094)
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 8
This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094.
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 6
ShadowRay RCE POC (CVE-2023-48022)
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the ve
85RIESGO
abrir ↗GitHub PoC
ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2
100RIESGO
abrir ↗GitHub PoC
Bludit 3.9.2 auth bruteforce bypass
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many
40RIESGO
abrir ↗GitHub PoC
mind2hex/CVE-2022-46169-Cacti-v1.2.22-RCE
Unauthenticated Command Injection
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.