Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.679exploits catalogados

40.329CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.150Exploit-DB 24.488GitHub PoC 17.946VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

17.946 exploits

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2012-0003HIGH28 mar 2024

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows

68RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2017-0143HIGHbajo ataqueransomware28 mar 2024

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

GitHub PoC

Sumitpathania03/Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246CRITICALbajo ataque28 mar 2024

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2015-1701HIGHbajo ataqueransomware28 mar 2024

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RIESGO

GitHub PoC

A working POC found while doing a HTB challenge. Original: https://github.com/user0x1337/CVE-2022-39227

CVE-2022-39227CRITICAL28 mar 2024

Python-jwt subject to Authentication Bypass by Spoofing

48RIESGO

GitHub PoC

ecrit un script python de correction de la vulnérabilités windows 7 pour réponse automatique de wazuh: CVE-2017-0143 (MS17-010 - EternalBlue) CVE-2019-0708 (BlueKeep), CVE-2019-1181 / CVE-2019-1182 (BlueKeep II), CVE-2015-1701 (MS15-034), CVE-2010-3333 (MS10-092), CVE-2012-0003 (MS12-020), CVE-2017-8759, CVE-2014-4114

CVE-2019-0708CRITICALbajo ataqueransomware28 mar 2024

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

GitHub PoC

mind2hex/CVE-2022-46169-Cacti-v1.2.22-RCE

CVE-2022-46169CRITICALbajo ataque28 mar 2024

Unauthenticated Command Injection

100RIESGO

GitHub PoC★ 1

Bludit 3.9.2 Remote Command Execution (RCE)

CVE-2019-16113—28 mar 2024

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

60RIESGO

GitHub PoC★ 1

Check CVE-2023-42789

CVE-2023-42789CRITICAL28 mar 2024

A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0

48RIESGO

GitHub PoC★ 5

it's a CVE-2023-28229 (Patched), but feel free to use it for check any outdated software or reseach

CVE-2023-28229HIGHbajo ataque27 mar 2024

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

71RIESGO

GitHub PoC

ticofookfook/CVE-2021-43798

CVE-2021-43798HIGHbajo ataque27 mar 2024

Grafana path traversal

100RIESGO

GitHub PoC★ 5

Unauthenticated Remote Code Execution (RCE) Vulnerability in WWBNIndex Plugin of AVideo Platform from 12.4 to 14.2

CVE-2024-31819CRITICAL27 mar 2024

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath

68RIESGO

GitHub PoC★ 3

Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using the Log4J vulnerability (CVE-2021-44228). I examined teh amount of endpoints communicating with the server and knowing jnidi as a common in the vulnerbilty found it in clear text

CVE-2021-44228CRITICALbajo ataqueransomware26 mar 2024

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 1

404fu/CVE-2022-26134-POC

CVE-2022-26134CRITICALbajo ataqueransomware26 mar 2024

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

GitHub PoC★ 34

Exploit for CVE-2024-20767 - Adobe ColdFusion

CVE-2024-20767HIGHbajo ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RIESGO

GitHub PoC

NMinhTrung/LIFERAY-CVE-2020-7961

CVE-2020-7961CRITICALbajo ataque26 mar 2024

Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c

100RIESGO

GitHub PoC★ 1

Proof of Concept for CVE-2024-20767. Arbitrary file read from Adobe ColdFusion

CVE-2024-20767HIGHbajo ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RIESGO

GitHub PoC★ 10

Exploit Toolkit for Adobe ColdFusion CVE-2024-20767 Vulnerability

CVE-2024-20767HIGHbajo ataque26 mar 2024

ColdFusion | Improper Access Control (CWE-284)

100RIESGO

GitHub PoC

Madan301/CVE-2024-2054

CVE-2024-2054CRITICAL25 mar 2024

Artica Proxy Unauthenticated PHP Deserialization Vulnerability

85RIESGO

GitHub PoC★ 9

evil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)

CVE-2023-38831HIGHbajo ataqueransomware25 mar 2024

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

GitHub PoC★ 2

Part of my cybersecurity thesis consists in exploring and exploiting this vulnerability.

CVE-2021-3560HIGHbajo ataque24 mar 2024

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RIESGO

GitHub PoC

CharonDefalt/WordPress--CVE-2022-21661

CVE-2022-21661HIGH24 mar 2024

SQL injection in WordPress

78RIESGO

GitHub PoC★ 15

0xyassine/CVE-2023-40028

CVE-2023-40028MEDIUM23 mar 2024

Arbitrary file read via symlinks in Ghost

45RIESGO

GitHub PoC★ 1

exploit CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware23 mar 2024

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC

Nhom6KTLT/CVE-2010-3124

CVE-2010-3124—22 mar 2024

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possib

28RIESGO

GitHub PoC★ 1

sxyrxyy/CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass

CVE-2024-1709CRITICALbajo ataqueransomware22 mar 2024

Authentication bypass using an alternate path or channel

100RIESGO

GitHub PoC★ 2

XenoM0rph97/CVE-2024-30896

CVE-2024-30896CRITICAL22 mar 2024

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows aut

48RIESGO

GitHub PoC★ 130

Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation

CVE-2023-36424HIGHbajo ataque21 mar 2024

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RIESGO

GitHub PoC

Practice POC scripting in Tryhackme’s intro poc scripting room (For Linux)

CVE-2012-2982—21 mar 2024

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RIESGO

GitHub PoC★ 6

it's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach

CVE-2023-28252HIGHbajo ataqueransomware21 mar 2024

Windows Common Log File System Driver Elevation of Privilege Vulnerability

98RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.