Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
76.894exploits catalogados
35.202CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 22.103GitHub PoC 14.055VulnCheck XDB 8571Nuclei 4250Metasploit 3472✓ solo verificadosrecientespopularesriesgo
76.894 exploits
Metasploit600
Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes
Win32k Elevation of Privilege Vulnerability
36RIESGO
abrir ↗Metasploit600
Windows Access Mode Mismatch LPE in ks.sys
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
91RIESGO
abrir ↗Metasploit300
Magento XXE Unserialize Arbitrary File Read
XXE can expose crypt key and other secrets granting full admin access
100RIESGO
abrir ↗GitHub PoC
Basic POC to test CVE-2024-3094 vulnerability inside K8s cluster
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC
PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC
Argument Injection in PHP-CGI
100RIESGO
abrir ↗GitHub PoC★ 4
NanoWraith/CVE-2024-23692
Rejetto HTTP File Server 2.3m Unauthenticated RCE
100RIESGO
abrir ↗VulnCheck XDB
local
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an I
41RIESGO
abrir ↗GitHub PoC★ 90
Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.
53RIESGO
abrir ↗GitHub PoC
feely666/CVE-2024-1086
Use-after-free in Linux kernel's netfilter: nf_tables component
76RIESGO
abrir ↗VulnCheck XDB
client-side
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o
100RIESGO
abrir ↗GitHub PoC
paradox0909/cve-2022-30333_online_rar_extracor
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o
100RIESGO
abrir ↗GitHub PoC★ 1
Vulnerability check script for CVE-2024-37393 (SecurEnvoy MFA 9.4.513)
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-suppl
63RIESGO
abrir ↗GitHub PoC
An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the submitIndex.php component.
An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath
68RIESGO
abrir ↗GitHub PoC★ 3
itzheartzz/MASS-CVE-2024-27956
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RIESGO
abrir ↗GitHub PoC
J4F9S5D2Q7/CVE-2023-43208-MIRTHCONNECT
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that
100RIESGO
abrir ↗GitHub PoC★ 10
A PoC exploit for CVE-2024-4577 - PHP CGI Argument Injection Remote Code Execution (RCE)
Argument Injection in PHP-CGI
100RIESGO
abrir ↗VulnCheck XDB
initial-access
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RIESGO
abrir ↗GitHub PoC★ 3
Objective: Demonstrate the exploitation of the Log4Shell vulnerability (CVE-2021-44228) within a simulated banking application environment.
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗GitHub PoC★ 16
POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal
Nexus Repository 3 - Path Traversal
61RIESGO
abrir ↗GitHub PoC★ 12
Authentication Bypass Vulnerability — CVE-2024–4358 — Telerik Report Server 2024
Registration Authentication Bypass Vulnerability
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.