Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.060exploits catalogados

35.302CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8607Nuclei 4257Metasploit 3474✓ solo verificadosrecientes populares riesgo

77.060 exploits

GitHub PoC★ 1

This Python script automates the Proof of Concept (PoC) for CVE-2023-36845, a vulnerability impacting Juniper Networks Junos OS on EX and SRX Series devices. The vulnerability resides in the J-Web component, allowing remote manipulation of the PHPRC variable, potentially leading to code injection.

CVE-2023-36845CRITICALbajo ataque14 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

GitHub PoC★ 1

Tool for exploring CVE-2023-30547

CVE-2023-30547CRITICAL14 feb 2024

Sandbox Escape in vm2

70RIESGO

GitHub PoC★ 1

stegano5/ExploitScript-CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware14 feb 2024

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-36845CRITICALbajo ataque14 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-36845CRITICALbajo ataque13 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-36845CRITICALbajo ataque13 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

GitHub PoC★ 5

CVES

CVE-2023-36845CRITICALbajo ataque13 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

GitHub PoC

CVE-2023-36845 и CVE-2023-36846 Juniper Junos OS J-Web RCE

CVE-2023-36845CRITICALbajo ataque13 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

VulnCheck XDB

initial-access

CVE-2017-1000486CRITICALbajo ataque13 feb 2024

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RIESGO

GitHub PoC

CVE-2024-23897

CVE-2024-23897CRITICALbajo ataqueransomware13 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-36846MEDIUMbajo ataque13 feb 2024

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

85RIESGO

GitHub PoC

Explotación CVE-2017-1000486

CVE-2017-1000486CRITICALbajo ataque13 feb 2024

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RIESGO

Metasploit600

QNAP QTS and QuTS Hero Unauthenticated Remote Code Execution in quick.cgi

CVE-2023-47218MEDIUM13 feb 2024

QTS, QuTS hero, QuTScloud

70RIESGO

GitHub PoC

Lab introduction to ZeroLogon

CVE-2020-1472MEDIUMbajo ataqueransomware12 feb 2024

Netlogon Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

local

CVE-2021-1675HIGHbajo ataqueransomware12 feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2020-1472MEDIUMbajo ataqueransomware12 feb 2024

Netlogon Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

local

CVE-2021-1675HIGHbajo ataqueransomware12 feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

local

CVE-2021-34527HIGHbajo ataqueransomware12 feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2024-1781MEDIUM12 feb 2024

Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection

38RIESGO

GitHub PoC★ 1

whoami-chmod777/CVE-2021-1675-CVE-2021-34527

CVE-2021-1675HIGHbajo ataqueransomware12 feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

whoami-chmod777/CVE-2021-1675---PrintNightmare-LPE-PowerShell-

CVE-2021-1675HIGHbajo ataqueransomware12 feb 2024

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 2

vidura2/cve-2023-46747

CVE-2023-46747CRITICALbajo ataqueransomware11 feb 2024

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

GitHub PoC

quangnh89/CVE-2022-4262

CVE-2022-4262HIGHbajo ataque11 feb 2024

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru

76RIESGO

VulnCheck XDB

initial-access

CVE-2023-22527CRITICALbajo ataqueransomware11 feb 2024

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RIESGO

GitHub PoC★ 1

CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept

CVE-2019-11447—11 feb 2024

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RIESGO

GitHub PoC★ 76

CVE-2023-22527 内存马注入工具

CVE-2023-22527CRITICALbajo ataqueransomware11 feb 2024

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-46747CRITICALbajo ataqueransomware11 feb 2024

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

VulnCheck XDB

client-side

CVE-2022-4262HIGHbajo ataque11 feb 2024

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru

76RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2019-11447—11 feb 2024

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RIESGO

Metasploit300

WordPress Ultimate Member SQL Injection (CVE-2024-1071)

CVE-2024-1071CRITICAL10 feb 2024

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

85RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.