Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.542exploits catalogados

34.971CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.947VulnCheck XDB 8542Nuclei 4243Metasploit 3468✓ solo verificadosrecientes populares riesgo

13.947 exploits

GitHub PoC

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability).

CVE-2019-20361HIGH18 mar 2021

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to b

78RIESGO

GitHub PoC★ 51

This is a Poc for BIGIP iControl unauth RCE

CVE-2021-22986CRITICALbajo ataqueransomware17 mar 2021

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RIESGO

GitHub PoC

Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE (Authenticated)

CVE-2019-11447—17 mar 2021

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RIESGO

GitHub PoC★ 124

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

CVE-2021-26855CRITICALbajo ataqueransomware17 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 4

CVE-2021-26855 proxyLogon metasploit exploit script

CVE-2021-26855CRITICALbajo ataqueransomware17 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 33

ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.

CVE-2021-26855CRITICALbajo ataqueransomware16 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

automate me!

CVE-2021-21973MEDIUMbajo ataque16 mar 2021

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of UR

100RIESGO

GitHub PoC★ 3

Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange

CVE-2021-26855CRITICALbajo ataqueransomware16 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 28

CVE-2021-26855 & CVE-2021-27065

CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 6

Mr-xn/CVE-2021-26855-d

CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 803

Sudo Baron Samedit Exploit

CVE-2021-3156HIGHbajo ataque15 mar 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

GitHub PoC★ 4

patched to work

CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

Exploit Samba

CVE-2007-2447—14 mar 2021

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

GitHub PoC★ 9

RCE exploit for ProxyLogon vulnerability in Microsoft Exchange

CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 30

CVE-2021-26855: PoC (Not a HoneyPoC for once!)

CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 22

RCE exploit for Microsoft Exchange Server (CVE-2021-26855).

CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 3

Scanner and PoC for CVE-2021-26855

CVE-2021-26855CRITICALbajo ataqueransomware12 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

vonderchild/CVE-2016-3088

CVE-2016-3088CRITICALbajo ataque12 mar 2021

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RIESGO

GitHub PoC

Will write a python script for exploiting this vulnerability

CVE-2020-25213CRITICALbajo ataque12 mar 2021

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra

100RIESGO

GitHub PoC★ 1077

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

CVE-2020-14883HIGHbajo ataque11 mar 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RIESGO

GitHub PoC★ 5

Apache ActiveMQ Remote Code Execution Exploit

CVE-2016-3088CRITICALbajo ataque11 mar 2021

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RIESGO

GitHub PoC★ 5

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 111

proxylogon exploit - CVE-2021-26857

CVE-2021-26857HIGHbajo ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

93RIESGO

GitHub PoC★ 12

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.

CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 61

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 53

alt3kx/CVE-2021-26855_PoC

CVE-2021-26855CRITICALbajo ataqueransomware10 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

This script test the CVE-2021-26855 vulnerability on Exchange Server.

CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 17

PoC exploit code for CVE-2021-26855

CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 100

h4x0r-dz/CVE-2021-26855

CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.