Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados

35.370CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientes populares riesgo

77.151 exploits

GitHub PoC

CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker

CVE-2023-46604CRITICALbajo ataqueransomware23 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 2

puckiestyle/CVE-2023-4911

CVE-2023-4911HIGHbajo ataque23 dic 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

VulnCheck XDB

local

CVE-2023-0386HIGHbajo ataque23 dic 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RIESGO

VulnCheck XDB

local

CVE-2023-4911HIGHbajo ataque23 dic 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

VulnCheck XDB

initial-access

CVE-2016-4437CRITICALbajo ataque22 dic 2023

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RIESGO

GitHub PoC★ 2

Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key

CVE-2016-4437CRITICALbajo ataque22 dic 2023

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RIESGO

GitHub PoC★ 16

CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that leads to Remote Command Execution via crafted docx document.

CVE-2023-50254CRITICAL22 dic 2023

Deepin Reader RCE vulnerability due to a design flaw

48RIESGO

GitHub PoC★ 4

Guillaume-Risch/cve-2023-29357-Sharepoint

CVE-2023-29357CRITICALbajo ataqueransomware22 dic 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALbajo ataqueransomware21 dic 2023

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

GitHub PoC★ 13

substing/CVE-2020-24186_reverse_shell_upload

CVE-2020-24186CRITICAL21 dic 2023

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo

85RIESGO

VulnCheck XDB

infoleak

CVE-2021-26855CRITICALbajo ataqueransomware21 dic 2023

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-3129CRITICALbajo ataqueransomware21 dic 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2021-42278HIGHbajo ataqueransomware21 dic 2023

Active Directory Domain Services Elevation of Privilege Vulnerability

93RIESGO

VulnCheck XDB

info-leak

CVE-2017-11882HIGHbajo ataqueransomware21 dic 2023

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2019-15107CRITICALbajo ataqueransomware21 dic 2023

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2018-9276HIGHbajo ataque21 dic 2023

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-21985CRITICALbajo ataqueransomware21 dic 2023

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

100RIESGO

VulnCheck XDB

client-side

CVE-2022-22536CRITICALbajo ataque21 dic 2023

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and

100RIESGO

VulnCheck XDB

initial-access

CVE-2018-1207—21 dic 2023

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute

60RIESGO

VulnCheck XDB

client-side

CVE-2016-4657HIGHbajo ataque21 dic 2023

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory

98RIESGO

GitHub PoC★ 1

Directory Traversal and Arbitrary File Read on Grafana

CVE-2021-43798HIGHbajo ataque21 dic 2023

Grafana path traversal

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-22986CRITICALbajo ataqueransomware21 dic 2023

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RIESGO

VulnCheck XDB

initial-access

CVE-2020-10148CRITICALbajo ataque21 dic 2023

SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands

100RIESGO

VulnCheck XDB

local

CVE-2022-0847HIGHbajo ataque21 dic 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

VulnCheck XDB

initial-access

CVE-2012-4869—21 dic 2023

The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attacke

60RIESGO

VulnCheck XDB

initial-access

CVE-2020-1472MEDIUMbajo ataqueransomware21 dic 2023

Netlogon Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2020-1472MEDIUMbajo ataqueransomware21 dic 2023

Netlogon Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-21661HIGH21 dic 2023

SQL injection in WordPress

78RIESGO

VulnCheck XDB

local

CVE-2020-0796CRITICALbajo ataqueransomware21 dic 2023

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

VulnCheck XDB

denial-of-service

CVE-2020-0796CRITICALbajo ataqueransomware21 dic 2023

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.