Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC

sei-fish/CVE-2021-22205

CVE-2021-22205CRITICALbajo ataqueransomware09 mar 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

abrir ↗

GitHub PoC

Results of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar

CVE-2023-21716CRITICAL08 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 59

A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as an email attachment (or other means).

CVE-2023-21716CRITICAL08 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 4

FeatherStark/CVE-2023-21716

CVE-2023-21716CRITICAL07 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 46

RTF Crash POC Python 3.11 Windows 10

CVE-2023-21716CRITICAL07 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 1

adriyansyah-mf/CVE-2023-23752

CVE-2023-23752MEDIUMbajo ataque07 mar 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC

rahmadsandy/EXIM-4.87-CVE-2019-10149

CVE-2019-10149CRITICALbajo ataque07 mar 2023

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RIESGO

abrir ↗

GitHub PoC★ 8

spring cloud function 一键利用工具! by charis 博客https://charis3306.top/

CVE-2022-22963CRITICALbajo ataque07 mar 2023

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RIESGO

abrir ↗

GitHub PoC

Script in Ruby for the CVE-2022-35914 - RCE in GLPI

CVE-2022-35914CRITICALbajo ataque07 mar 2023

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RIESGO

abrir ↗

GitHub PoC★ 1

Pada bulan maret 2023, terdapat sample baru yang terindentifikasi sebagai malware. Malware tersebut berasal dari file berekstensi.xls dan .doc dan dikenal dengan nama “Bank Slip.xls”. Aktivitas malware tersebut memiliki hubungan dengan kerentanan yang dikenal dengan id CVE-2017-11882 dan CVE-2018-0802.

CVE-2017-11882HIGHbajo ataqueransomware06 mar 2023

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2018-0802HIGHbajo ataqueransomware06 mar 2023

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow

93RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-31814

CVE-2022-31814CRITICAL05 mar 2023

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RIESGO

abrir ↗

GitHub PoC★ 13

Laravel Debug mode RCE漏洞（CVE-2021-3129）poc / exp

CVE-2021-3129CRITICALbajo ataqueransomware04 mar 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 6

This script is used for automating exploit for Oracle Ebussiness (EBS) for CVE 2022-21587 ( Unauthenticated File Upload For Remote Code Execution)

CVE-2022-21587CRITICALbajo ataqueransomware03 mar 2023

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

100RIESGO

abrir ↗

GitHub PoC

🚀 Exploit for Spring core RCE in C [ wip ]

CVE-2022-22965CRITICALbajo ataque02 mar 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC

An exploit for CVE-2017-5638

CVE-2017-5638CRITICALbajo ataqueransomware02 mar 2023

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

abrir ↗

GitHub PoC

Checker and exploit for Bluekeep CVE-2019-0708 vulnerability

CVE-2019-0708CRITICALbajo ataqueransomware02 mar 2023

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

abrir ↗

GitHub PoC

mritunjay-k/CVE-2014-6271

CVE-2014-6271CRITICALbajo ataque02 mar 2023

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

abrir ↗

GitHub PoC★ 1

TheUnknownSoul/CVE-2022-31814

CVE-2022-31814CRITICAL01 mar 2023

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RIESGO

abrir ↗

GitHub PoC★ 13

Joomla 未授权访问漏洞 CVE-2023-23752

CVE-2023-23752MEDIUMbajo ataque01 mar 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC

A demonstration of CVE-2022-42889 (text4shell) remote code execution vulnerability

CVE-2022-42889—01 mar 2023

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RIESGO

abrir ↗

GitHub PoC★ 1

cve-2020-0796利用工具集

CVE-2020-0796CRITICALbajo ataqueransomware28 feb 2023

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC★ 2

Kubernetes Lab for CVE-2022-42889

CVE-2022-42889—28 feb 2023

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RIESGO

abrir ↗

GitHub PoC★ 10

BlackVue DR750 CVE CVE-2023-27746 CVE-2023-27747 CVE-2023-27748

CVE-2023-27746CRITICAL28 feb 2023

BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracke

48RIESGO

abrir ↗

GitHub PoC

hhhotdrink/CVE-2021-22205

CVE-2021-22205CRITICALbajo ataqueransomware27 feb 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

abrir ↗

GitHub PoC★ 5

一键枚举所有用户名以及写入SSH公钥

CVE-2022-40684CRITICALbajo ataqueransomware27 feb 2023

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an

100RIESGO

abrir ↗

GitHub PoC

sz-guanx/CVE-2021-32305

CVE-2021-32305—27 feb 2023

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RIESGO

abrir ↗

GitHub PoC★ 2

Ozozuz/Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098

CVE-2022-33098—27 feb 2023

Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function.

35RIESGO

abrir ↗

GitHub PoC

orsuprasad/CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847HIGHbajo ataque26 feb 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 7

CVE analysis for CVE-2023-0669

CVE-2023-0669HIGHbajo ataqueransomware26 feb 2023

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.