Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
77.151 exploits
VulnCheck XDB
local
CVE-2024-21626HIGH02 feb 2024
runc container breakout through process.cwd trickery and leaked fds
61RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2024-21626HIGH01 feb 2024
runc container breakout through process.cwd trickery and leaked fds
61RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2024-21626HIGH01 feb 2024
runc container breakout through process.cwd trickery and leaked fds
61RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2023-32784HIGH01 feb 2024
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work
41RIESGO
abrir ↗
GitHub PoC★ 1
PoC for Jenkins CVE-2024-23897
CVE-2024-23897CRITICALbajo ataqueransomware01 feb 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-36845CRITICALbajo ataque01 feb 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RIESGO
abrir ↗
GitHub PoC
cyb3rzest/Juniper-Bug-Automation-CVE-2023-36845
CVE-2023-36845CRITICALbajo ataque01 feb 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-7600CRITICALbajo ataqueransomware01 feb 2024
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RIESGO
abrir ↗
GitHub PoC★ 1
POC about Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass Wordpress plugin
CVE-2023-6036CRITICAL31 ene 2024
Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass
48RIESGO
abrir ↗
GitHub PoC★ 2
Es una vulnerabilidad para escalar privilegios en linux.
CVE-2019-13272HIGHbajo ataque31 ene 2024
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RIESGO
abrir ↗
GitHub PoC
m-y-mo: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632
CVE-2021-30632HIGHbajo ataque31 ene 2024
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c
83RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2021-30632HIGHbajo ataque31 ene 2024
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c
83RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-7247CRITICALbajo ataque31 ene 2024
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to
100RIESGO
abrir ↗
Metasploit600
Ivanti Connect Secure Unauthenticated Remote Code Execution
CVE-2024-21887CRITICALbajo ataqueransomware31 ene 2024
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,
100RIESGO
abrir ↗
Metasploit600
Ivanti Connect Secure Unauthenticated Remote Code Execution
CVE-2024-21893HIGHbajo ataqueransomware31 ene 2024
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy
100RIESGO
abrir ↗
Metasploit600
runc (docker) File Descriptor Leak Privilege Escalation
CVE-2024-21626HIGH31 ene 2024
runc container breakout through process.cwd trickery and leaked fds
61RIESGO
abrir ↗
Metasploit600
Ivanti Connect Secure Unauthenticated Remote Code Execution
CVE-2023-36661HIGH31 ene 2024
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyIn
36RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2019-13272HIGHbajo ataque31 ene 2024
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-3560HIGHbajo ataque31 ene 2024
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-36845CRITICALbajo ataque30 ene 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2023-6700HIGH30 ene 2024
Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update
41RIESGO
abrir ↗
GitHub PoC★ 1
Juniper RCE (Remote Code Execution) CVE-2023-36845 is a vulnerability that has been identified within Juniper's software. This particular flaw allows for remote code execution, meaning an attacker could run arbitrary code on a system without needing physical access to the device.
CVE-2023-36845CRITICALbajo ataque30 ene 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RIESGO
abrir ↗
GitHub PoC★ 19
Simple Automation script for juniper cve-2023-36845
CVE-2023-36845CRITICALbajo ataque29 ene 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RIESGO
abrir ↗
GitHub PoC★ 5
Jenkins POC of Arbitrary file read vulnerability through the CLI can lead to RCE
CVE-2024-23897CRITICALbajo ataqueransomware29 ene 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
GitHub PoC★ 5
CVE-2023-41892 Reverse Shell
CVE-2023-41892CRITICAL29 ene 2024
Craft CMS Remote Code Execution vulnerability
85RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALbajo ataqueransomware29 ene 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALbajo ataqueransomware29 ene 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
GitHub PoC★ 1
jopraveen/CVE-2024-23897
CVE-2024-23897CRITICALbajo ataqueransomware29 ene 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2023-36845CRITICALbajo ataque29 ene 2024
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALbajo ataqueransomware29 ene 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
← anteriorpágina 427 / 2572siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.