Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados

40.392CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.020 exploits

GitHub PoC★ 1

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader]

CVE-2023-1389HIGHbajo ataque25 dic 2023

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RIESGO

abrir ↗

GitHub PoC★ 18

puckiestyle/CVE-2023-0386

CVE-2023-0386HIGHbajo ataque23 dic 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RIESGO

abrir ↗

GitHub PoC

CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker

CVE-2023-46604CRITICALbajo ataqueransomware23 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 2

puckiestyle/CVE-2023-4911

CVE-2023-4911HIGHbajo ataque23 dic 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

98RIESGO

abrir ↗

GitHub PoC★ 16

CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that leads to Remote Command Execution via crafted docx document.

CVE-2023-50254CRITICAL22 dic 2023

Deepin Reader RCE vulnerability due to a design flaw

48RIESGO

abrir ↗

GitHub PoC★ 4

Guillaume-Risch/cve-2023-29357-Sharepoint

CVE-2023-29357CRITICALbajo ataqueransomware22 dic 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 2

Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key

CVE-2016-4437CRITICALbajo ataque22 dic 2023

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RIESGO

abrir ↗

GitHub PoC★ 1

Directory Traversal and Arbitrary File Read on Grafana

CVE-2021-43798HIGHbajo ataque21 dic 2023

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC★ 14

substing/CVE-2020-24186_reverse_shell_upload

CVE-2020-24186CRITICAL21 dic 2023

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo

85RIESGO

abrir ↗

GitHub PoC★ 4

Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)

CVE-2009-3103—20 dic 2023

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window

60RIESGO

abrir ↗

GitHub PoC

That-Guy-Steve/CVE-2018-1133-Exploit

CVE-2018-1133—20 dic 2023

An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code exec

35RIESGO

abrir ↗

GitHub PoC

Binaries for "CVE-2023-23752"

CVE-2023-23752MEDIUMbajo ataque19 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC

OwnCloud CVE-2023-49103

CVE-2023-49103CRITICALbajo ataque19 dic 2023

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies

100RIESGO

abrir ↗

GitHub PoC★ 25

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

CVE-2023-4863HIGHbajo ataque19 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC

An implementation of a proof-of-concept for CVE-2018-5767

CVE-2018-5767—18 dic 2023

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code

35RIESGO

abrir ↗

GitHub PoC★ 54

LiveOverflow/webp-CVE-2023-4863

CVE-2023-4863HIGHbajo ataque18 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC

Repository that contains a CVE-2020-11651 Exploit updated to work with the latest versions of python.

CVE-2020-11651CRITICALbajo ataque18 dic 2023

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RIESGO

abrir ↗

GitHub PoC★ 1

Arszilla/CVE-2023-6538

CVE-2023-6538HIGH18 dic 2023

System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.

41RIESGO

abrir ↗

GitHub PoC

jee web project with log4shell (CVE-2021-44228) vulnerability

CVE-2021-44228CRITICALbajo ataqueransomware18 dic 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC

An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints within Joomla! CMS versions 4.0.0 through 4.2.7. This vulnerability could be exploited by attackers to gain unauthorized access to sensitive information or perform unauthorized actions.

CVE-2023-23752MEDIUMbajo ataque18 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 2

Simulates CVE-2023-4966 Citrix Bleed overread bug

CVE-2023-4966CRITICALbajo ataqueransomware16 dic 2023

Unauthenticated sensitive information disclosure

100RIESGO

abrir ↗

GitHub PoC

dcm2406/CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware16 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC

Remote Code Execution exploit for PrimeFaces 5.x - EL Injection (CVE-2017-1000486)

CVE-2017-1000486CRITICALbajo ataque15 dic 2023

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RIESGO

abrir ↗

GitHub PoC

ZhiQiAnSecFork/DirtyCOW_CVE-2016-5195

CVE-2016-5195HIGHbajo ataque15 dic 2023

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC

markyu0401/CVE-2021-3560-Polkit-Privilege-Escalation

CVE-2021-3560HIGHbajo ataque15 dic 2023

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RIESGO

abrir ↗

GitHub PoC

ZhiQiAnSecFork/cve-2017-16995

CVE-2017-16995—15 dic 2023

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RIESGO

abrir ↗

GitHub PoC★ 13

A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass

CVE-2023-32315HIGHbajo ataque15 dic 2023

Openfire administration console authentication bypass

100RIESGO

abrir ↗

GitHub PoC★ 5

Exihibitor Web Ui 1.7.1 RCE, CVE-2019-5029

CVE-2019-5029CRITICAL14 dic 2023

An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7

60RIESGO

abrir ↗

GitHub PoC★ 1

imperva/CVE-2023-22524

CVE-2023-22524CRITICAL14 dic 2023

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att

53RIESGO

abrir ↗

GitHub PoC★ 25

Atlassian Companion RCE Vulnerability Proof of Concept

CVE-2023-22524CRITICAL14 dic 2023

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att

53RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.