Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.058exploits catalogados
35.300CVEs con explotación pública
24.695probados en laboratorio
77.058 exploits
GitHub PoC34
Exploit for CVE-2024-20767 - Adobe ColdFusion
CVE-2024-20767HIGHbajo ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RIESGO
abrir
GitHub PoC10
Exploit Toolkit for Adobe ColdFusion CVE-2024-20767 Vulnerability
CVE-2024-20767HIGHbajo ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RIESGO
abrir
GitHub PoC1
Proof of Concept for CVE-2024-20767. Arbitrary file read from Adobe ColdFusion
CVE-2024-20767HIGHbajo ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RIESGO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHbajo ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RIESGO
abrir
GitHub PoC1
404fu/CVE-2022-26134-POC
CVE-2022-26134CRITICALbajo ataqueransomware26 mar 2024
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RIESGO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHbajo ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RIESGO
abrir
VulnCheck XDB
infoleak
CVE-2024-20767HIGHbajo ataque26 mar 2024
ColdFusion | Improper Access Control (CWE-284)
100RIESGO
abrir
GitHub PoC
NMinhTrung/LIFERAY-CVE-2020-7961
CVE-2020-7961CRITICALbajo ataque26 mar 2024
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RIESGO
abrir
VulnCheck XDB
client-side
CVE-2023-38831HIGHbajo ataqueransomware25 mar 2024
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir
GitHub PoC
Madan301/CVE-2024-2054
CVE-2024-2054CRITICAL25 mar 2024
Artica Proxy Unauthenticated PHP Deserialization Vulnerability
85RIESGO
abrir
GitHub PoC9
evil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)
CVE-2023-38831HIGHbajo ataqueransomware25 mar 2024
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir
GitHub PoC
CharonDefalt/WordPress--CVE-2022-21661
CVE-2022-21661HIGH24 mar 2024
SQL injection in WordPress
78RIESGO
abrir
VulnCheck XDB
local
CVE-2021-3560HIGHbajo ataque24 mar 2024
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir
GitHub PoC2
Part of my cybersecurity thesis consists in exploring and exploiting this vulnerability.
CVE-2021-3560HIGHbajo ataque24 mar 2024
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir
VulnCheck XDB
infoleak
CVE-2022-21661HIGH24 mar 2024
SQL injection in WordPress
78RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALbajo ataqueransomware23 mar 2024
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir
GitHub PoC13
0xyassine/CVE-2023-40028
CVE-2023-40028MEDIUM23 mar 2024
Arbitrary file read via symlinks in Ghost
45RIESGO
abrir
GitHub PoC1
exploit CVE-2021-44228
CVE-2021-44228CRITICALbajo ataqueransomware23 mar 2024
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2023-4808423 mar 2024
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
50RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2024-1709CRITICALbajo ataqueransomware22 mar 2024
Authentication bypass using an alternate path or channel
100RIESGO
abrir
GitHub PoC
Nhom6KTLT/CVE-2010-3124
CVE-2010-312422 mar 2024
Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possib
28RIESGO
abrir
GitHub PoC2
XenoM0rph97/CVE-2024-30896
CVE-2024-30896CRITICAL22 mar 2024
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows aut
48RIESGO
abrir
GitHub PoC1
sxyrxyy/CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass
CVE-2024-1709CRITICALbajo ataqueransomware22 mar 2024
Authentication bypass using an alternate path or channel
100RIESGO
abrir
GitHub PoC1
Lilly-dox/Exploit-CVE-2023-22518
CVE-2023-22518CRITICALbajo ataqueransomware21 mar 2024
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2023-36424HIGHbajo ataque21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RIESGO
abrir
VulnCheck XDB
local
CVE-2023-28252HIGHbajo ataqueransomware21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
98RIESGO
abrir
GitHub PoC
JolynNgSC/Zerologon_CVE-2020-1472
CVE-2020-1472MEDIUMbajo ataqueransomware21 mar 2024
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir
GitHub PoC130
Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation
CVE-2023-36424HIGHbajo ataque21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RIESGO
abrir
GitHub PoC8
POC code according to trendmicro's research
CVE-2024-21412HIGHbajo ataqueransomware21 mar 2024
Internet Shortcut Files Security Feature Bypass Vulnerability
93RIESGO
abrir
GitHub PoC6
it's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach
CVE-2023-28252HIGHbajo ataqueransomware21 mar 2024
Windows Common Log File System Driver Elevation of Privilege Vulnerability
98RIESGO
abrir
anteriorpágina 414 / 2569siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.