Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados

40.392CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.020 exploits

GitHub PoC★ 5

CVE-2023-46604 Apache ActiveMQ RCE exp 基于python

CVE-2023-46604CRITICALbajo ataqueransomware08 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 2

Exploitation of the CVE-2021-3560 polkit vulnerability

CVE-2021-3560HIGHbajo ataque08 nov 2023

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RIESGO

GitHub PoC★ 1

WinRAR cve-2023-38831-poc-generator

CVE-2023-38831HIGHbajo ataqueransomware07 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

GitHub PoC★ 5

Proof of Concept Exploit for CVE-2021-43609

CVE-2021-43609CRITICAL06 nov 2023

An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within

48RIESGO

GitHub PoC

d4rkb0n3/CVE-2022-24715-go

CVE-2022-24715HIGH06 nov 2023

Arbitrary code execution for authenticated users in Icinga Web 2

46RIESGO

GitHub PoC★ 27

WonderCMS Authenticated RCE - CVE-2023-41425

CVE-2023-41425MEDIUM05 nov 2023

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code

60RIESGO

GitHub PoC

In this repository you will find the technical report of Nibbles, the exploit to abuse the CVE-2015-6967 and an autopwn tool in case you want to resolve the machine in HackTheBox

CVE-2015-6967—05 nov 2023

Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to

50RIESGO

GitHub PoC★ 17

Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC

CVE-2019-2215HIGHbajo ataque05 nov 2023

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

GitHub PoC★ 43

An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization

CVE-2023-22518CRITICALbajo ataqueransomware05 nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RIESGO

GitHub PoC

ayushx007/CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847HIGHbajo ataque05 nov 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

GitHub PoC★ 17

Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)

CVE-2023-3452CRITICAL05 nov 2023

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

63RIESGO

GitHub PoC★ 5

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

CVE-2023-5360—05 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

GitHub PoC★ 9

Exploit for CVE-2023-37903

CVE-2023-37903CRITICAL05 nov 2023

Sandbox Escape in vm2

48RIESGO

GitHub PoC★ 3

This is an exploit file which is used to check CVE-2021-21716 vulnerability

CVE-2023-21716CRITICAL04 nov 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

GitHub PoC★ 40

evkl1d/CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware04 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 126

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

CVE-2023-46604CRITICALbajo ataqueransomware03 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC

Wordpress CVE-2023-5360

CVE-2023-5360—03 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

GitHub PoC★ 3

An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs

CVE-2023-46747CRITICALbajo ataqueransomware03 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC★ 7

An Exploitation script developed to exploit the CVE-2023-20198 Cisco zero day vulnerability on their IOS routers

CVE-2023-20198CRITICALbajo ataque03 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

GitHub PoC★ 10

Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: CVE-2023-5360.

CVE-2023-5360—02 nov 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

GitHub PoC★ 8

Checker for CVE-2023-22518 vulnerability on Confluence

CVE-2023-22518CRITICALbajo ataqueransomware02 nov 2023

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RIESGO

GitHub PoC★ 7

nvansluis/test_cve-2023-46747

CVE-2023-46747CRITICALbajo ataqueransomware02 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC

jakedmurphy1/CVE-2023-46954

CVE-2023-46954CRITICAL02 nov 2023

SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacke

48RIESGO

GitHub PoC

sajaljat/CVE-2023-46980

CVE-2023-46980CRITICAL02 nov 2023

An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privile

48RIESGO

GitHub PoC

NestyF/SSH_Enum_CVE-2018-15473

CVE-2018-15473MEDIUM02 nov 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

GitHub PoC★ 208

exploit for f5-big-ip RCE cve-2023-46747

CVE-2023-46747CRITICALbajo ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC

CVE-2023-46747 Criticle Auth Bypass

CVE-2023-46747CRITICALbajo ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC★ 2

maniak-academy/Mitigate-CVE-2023-46747

CVE-2023-46747CRITICALbajo ataqueransomware01 nov 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC

SideCopy APT Group exploits CVE-2023-38831

CVE-2023-38831HIGHbajo ataqueransomware01 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

GitHub PoC★ 1

A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab

CVE-2021-22205CRITICALbajo ataqueransomware01 nov 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.