Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados

35.370CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientes populares riesgo

77.151 exploits

GitHub PoC

DDayLuong/CVE-2019-18634

CVE-2019-18634—27 dic 2023

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RIESGO

abrir ↗

GitHub PoC★ 4

motikan2010/CVE-2023-6553-PoC

CVE-2023-6553CRITICAL27 dic 2023

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

85RIESGO

abrir ↗

GitHub PoC

POC +report note

CVE-2018-17552—27 dic 2023

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigat

60RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2021-3156HIGHbajo ataque27 dic 2023

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-6553CRITICAL27 dic 2023

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

85RIESGO

abrir ↗

GitHub PoC

jee web project with sanitised log4shell (CVE-2021-44228) vulnerability

CVE-2021-44228CRITICALbajo ataqueransomware27 dic 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-41892CRITICAL26 dic 2023

Craft CMS Remote Code Execution vulnerability

85RIESGO

abrir ↗

GitHub PoC

tannlh/CVE-2018-20250

CVE-2018-20250HIGHbajo ataqueransomware26 dic 2023

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RIESGO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2021-4045CRITICAL26 dic 2023

TP-LINK Tapo C200 remote code execution vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 9

🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓

CVE-2021-4045CRITICAL26 dic 2023

TP-LINK Tapo C200 remote code execution vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 2

Exploit Development using python for CVE-2023-38831 (POC)

CVE-2023-38831HIGHbajo ataqueransomware26 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2023-41892

CVE-2023-41892CRITICAL26 dic 2023

Craft CMS Remote Code Execution vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 1

This is a exploit of CVE-2021-32305 a web vulnerability to command injection on search.php path, this exploit allows execute commands.

CVE-2021-32305—26 dic 2023

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RIESGO

abrir ↗

GitHub PoC★ 1

MkJos/CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246CRITICALbajo ataque26 dic 2023

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RIESGO

abrir ↗

GitHub PoC★ 5

Exploit for Arbitrary File Read for CVE-2023-26360 - Adobe Coldfusion

CVE-2023-26360HIGHbajo ataque26 dic 2023

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-26360HIGHbajo ataque26 dic 2023

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-38831HIGHbajo ataqueransomware26 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-32305—26 dic 2023

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2018-20250HIGHbajo ataqueransomware26 dic 2023

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RIESGO

abrir ↗

GitHub PoC

kimstars/POC-CVE-2022-28117

CVE-2022-28117—26 dic 2023

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the ap

43RIESGO

abrir ↗

GitHub PoC★ 1

Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration testing and ethical hacking. Developed and maintained by Mohamed Mounir Boudjema, this repository is crafted with a deep understanding of the evolving landscape of cybersecurity.

CVE-2023-6710MEDIUM25 dic 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-27524HIGHbajo ataque25 dic 2023

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RIESGO

abrir ↗

GitHub PoC★ 1

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader]

CVE-2023-1389HIGHbajo ataque25 dic 2023

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RIESGO

abrir ↗

GitHub PoC★ 13

dust-life/CVE-2019-18935-memShell

CVE-2019-18935CRITICALbajo ataqueransomware25 dic 2023

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RIESGO

abrir ↗

GitHub PoC★ 2

Explore the depths of CVE-2023-6710 with our comprehensive Proof of Concept (PoC). This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks.

CVE-2023-6710MEDIUM25 dic 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RIESGO

abrir ↗

Metasploit600

Barracuda ESG Spreadsheet::ParseExcel Arbitrary Code Execution

CVE-2023-7101HIGHbajo ataque24 dic 2023

Arbitrary Code Execution (ACE) Vulnerability

71RIESGO

abrir ↗

Metasploit600

Barracuda ESG Spreadsheet::ParseExcel Arbitrary Code Execution

CVE-2023-7102—24 dic 2023

Remote Code Execution (RCE) Vulnerability

30RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMbajo ataque24 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALbajo ataqueransomware23 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 18

puckiestyle/CVE-2023-0386

CVE-2023-0386HIGHbajo ataque23 dic 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.