Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados

40.392CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.020 exploits

GitHub PoC★ 5

Simple scanner for scanning a list of ip-addresses for vulnerable Ivanti Pulse Secure devices

CVE-2023-46805HIGHbajo ataqueransomware16 ene 2024

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re

100RIESGO

abrir ↗

GitHub PoC★ 26

CVE-2023-22527 - RCE (Remote Code Execution) Vulnerability In Confluence Data Center and Confluence Server PoC

CVE-2023-22527CRITICALbajo ataqueransomware16 ene 2024

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RIESGO

abrir ↗

GitHub PoC★ 58

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

CVE-2024-21887CRITICALbajo ataqueransomware16 ene 2024

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,

100RIESGO

abrir ↗

GitHub PoC★ 23

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

CVE-2024-21887CRITICALbajo ataqueransomware16 ene 2024

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,

100RIESGO

abrir ↗

GitHub PoC

Exploit information for CVE-2023-26602

CVE-2023-26602—16 ene 2024

ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create exten

28RIESGO

abrir ↗

GitHub PoC

Pol-Ruiz/CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware16 ene 2024

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

Exploit information for CVE-2023-26609

CVE-2023-26609HIGH16 ene 2024

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin

53RIESGO

abrir ↗

GitHub PoC

Proof of Concept script to exploit CVE-2023-42793 (TeamCity)

CVE-2023-42793CRITICALbajo ataqueransomware15 ene 2024

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RIESGO

abrir ↗

GitHub PoC★ 6

CVE-2021-3129

CVE-2021-3129CRITICALbajo ataqueransomware15 ene 2024

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC

1.验证CVE-2016-4437、2.解析rememberMe的文件和CBC加密的IV偏移

CVE-2016-4437CRITICALbajo ataque15 ene 2024

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RIESGO

abrir ↗

GitHub PoC★ 7

POC Checker for ivanti CVE-2024-21887 Command injcetion

CVE-2024-21887CRITICALbajo ataqueransomware14 ene 2024

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,

100RIESGO

abrir ↗

GitHub PoC★ 10

Scanner for CVE-2023-46805 - Ivanti Connect Secure

CVE-2023-46805HIGHbajo ataqueransomware14 ene 2024

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re

100RIESGO

abrir ↗

GitHub PoC

Program ini adalah alat (tool) yang dibuat untuk memeriksa keamanan sistem Minio terkait dengan kerentanan CVE-2022-35919

CVE-2022-35919HIGH13 ene 2024

Authenticated requests for server update admin API allows path traversal in minio

53RIESGO

abrir ↗

GitHub PoC★ 245

This repository presents a proof-of-concept of CVE-2023-7028

CVE-2023-7028CRITICALbajo ataque12 ene 2024

Weak Password Recovery Mechanism for Forgotten Password in GitLab

100RIESGO

abrir ↗

GitHub PoC★ 3

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

CVE-2023-7028CRITICALbajo ataque12 ene 2024

Weak Password Recovery Mechanism for Forgotten Password in GitLab

100RIESGO

abrir ↗

GitHub PoC★ 58

CVE-2023-7028

CVE-2023-7028CRITICALbajo ataque12 ene 2024

Weak Password Recovery Mechanism for Forgotten Password in GitLab

100RIESGO

abrir ↗

GitHub PoC

CVE-2023-7028 poc

CVE-2023-7028CRITICALbajo ataque12 ene 2024

Weak Password Recovery Mechanism for Forgotten Password in GitLab

100RIESGO

abrir ↗

GitHub PoC★ 1

Simple Student Attendance System v.1.0 - Multiple SQL injection vulnerabilities - student_form.php and class_form.php

CVE-2023-51801CRITICAL11 ene 2024

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary

48RIESGO

abrir ↗

GitHub PoC★ 1

PoC for CVE-2022-1388 affecting F5 BIG-IP.

CVE-2022-1388CRITICALbajo ataqueransomware09 ene 2024

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 12

PoC Script for CVE-2022-36267: Exploits an unauthenticated remote command injection vulnerability in Airspan AirSpot 5410 antenna.

CVE-2022-36267—08 ene 2024

In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerabilit

35RIESGO

abrir ↗

GitHub PoC

johnossawy/CVE-2023-42793_POC

CVE-2023-42793CRITICALbajo ataqueransomware07 ene 2024

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RIESGO

abrir ↗

GitHub PoC

MS-NRPC (Microsoft NetLogon Remote Protocol)/CVE-2020-1472

CVE-2020-1472MEDIUMbajo ataqueransomware07 ene 2024

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC

Local Privilege Escalation (LPE) vulnerability in Polkit - Pwnkit

CVE-2021-4034HIGHbajo ataqueransomware06 ene 2024

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

Clone from gist

CVE-2021-26855CRITICALbajo ataqueransomware04 ene 2024

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

Script to validate WordPress CVE-2022-21661

CVE-2022-21661HIGH04 ene 2024

SQL injection in WordPress

78RIESGO

abrir ↗

GitHub PoC★ 1

touch 生成文件

CVE-2021-4034HIGHbajo ataqueransomware04 ene 2024

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

julienbrs/exploit-CVE-2023-3460

CVE-2023-3460—04 ene 2024

Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

60RIESGO

abrir ↗

GitHub PoC★ 3

exploit poc

CVE-2022-1388CRITICALbajo ataqueransomware03 ene 2024

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2020-11023 PoC for bug bounty.

CVE-2020-11023MEDIUMbajo ataque03 ene 2024

Potential XSS vulnerability in jQuery

85RIESGO

abrir ↗

GitHub PoC

Sumitpathania03/CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque03 ene 2024

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.