Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 5

Exploit to capitalize on vulnerability CVE-2020-2038.

CVE-2020-2038HIGH03 ago 2022

PAN-OS: OS command injection vulnerability in the management web interface

78RIESGO

abrir ↗

GitHub PoC

Apache Log4j is a logging tool written in Java. This paper focuses on what is Log4j and log4shell vulnerability and how it works, how it affects the victim, and how can this be mitigated

CVE-2021-44228CRITICALbajo ataqueransomware02 ago 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC

This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP 59777 port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the vulnerability. Download the PDF and enjoy !!! Cheers !!!

CVE-2019-6447—02 ago 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC★ 2

A Fullstack Academy Cybersecurity project examining the full cycle of the Follina (CVE-2022-30190) vulnerability, from exploit to detection and defense.

CVE-2022-30190HIGHbajo ataqueransomware01 ago 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

COMPILED

CVE-2022-0847HIGHbajo ataque01 ago 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC

xpgdgit/CVE-2015-5531

CVE-2015-5531—01 ago 2022

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RIESGO

abrir ↗

GitHub PoC★ 4

r4x0r1337/-CVE-2022-29464

CVE-2022-29464CRITICALbajo ataqueransomware01 ago 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 1

Script en python sobre la vulnerabilidad CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware01 ago 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

xpgdgit/CVE-2014-3120

CVE-2014-3120HIGHbajo ataque01 ago 2022

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut

100RIESGO

abrir ↗

GitHub PoC★ 7

CVE-2022-21661 exp for Elementor custom skin.

CVE-2022-21661HIGH31 jul 2022

SQL injection in WordPress

78RIESGO

abrir ↗

GitHub PoC

PoC exploit for CVE-2017-1000251 (modified)

CVE-2017-1000251—31 jul 2022

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RIESGO

abrir ↗

GitHub PoC★ 2

Script to exploit CVE-2018-1042 in order to do internal port scans.

CVE-2018-1042—30 jul 2022

Moodle 3.x has Server Side Request Forgery in the filepicker.

28RIESGO

abrir ↗

GitHub PoC★ 25

「💥」CVE-2022-33891 - Apache Spark Command Injection

CVE-2022-33891HIGHbajo ataque30 jul 2022

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

GitHub PoC★ 15

Confluence Hardcoded Password POC

CVE-2022-26138CRITICALbajo ataque30 jul 2022

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th

100RIESGO

abrir ↗

GitHub PoC

xpgdgit/CVE-2015-1427

CVE-2015-1427CRITICALbajo ataque29 jul 2022

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s

100RIESGO

abrir ↗

GitHub PoC★ 78

wo ee cve-2022-2185 gitlab authenticated rce

CVE-2022-2185CRITICAL29 jul 2022

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

85RIESGO

abrir ↗

GitHub PoC★ 29

WordPress WP_Query SQL Injection POC

CVE-2022-21661HIGH28 jul 2022

SQL injection in WordPress

78RIESGO

abrir ↗

GitHub PoC★ 1

libSSH-Authentication-Bypass

CVE-2018-10933CRITICAL28 jul 2022

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

GitHub PoC

Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)

CVE-2001-0550—28 jul 2022

wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which i

45RIESGO

abrir ↗

GitHub PoC★ 3

Atlassian Confluence Server and Data Center: CVE-2022-26138

CVE-2022-26138CRITICALbajo ataque28 jul 2022

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th

100RIESGO

abrir ↗

GitHub PoC

weblogic-cve-2018-2628-exp

CVE-2018-2628CRITICALbajo ataque27 jul 2022

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

GitHub PoC★ 14

QNAP N-Day (Probably not CVE-2020-2509)

CVE-2020-2509CRITICALbajo ataque27 jul 2022

Command Injection Vulnerability in QTS and QuTS hero

90RIESGO

abrir ↗

GitHub PoC★ 408

警惕一种针对红队的新型溯源手段!

CVE-2022-26809CRITICAL27 jul 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC

Module for PrestaShop 1.6.1.X/1.7.X to fix CVE-2022-31181 / CVE-2022-36408 vulnerability (Chain SQL Injection)

CVE-2022-31181CRITICAL26 jul 2022

Remote code execution in prestashop

63RIESGO

abrir ↗

GitHub PoC★ 7

Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.

CVE-2022-30333CRITICALbajo ataqueransomware26 jul 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RIESGO

abrir ↗

GitHub PoC★ 1

WebMin Versions <= 1.920 [CVE-2019-15107] RCE PoC

CVE-2019-15107CRITICALbajo ataqueransomware26 jul 2022

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

abrir ↗

GitHub PoC

A demo for cve-2019-12735

CVE-2019-12735—26 jul 2022

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via th

28RIESGO

abrir ↗

GitHub PoC★ 42

Major Security Vulnerability on PrestaShop Websites - CVE-2022-31101

CVE-2022-31101HIGH24 jul 2022

SQL Injection in prestashop/blockwishlist

61RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2014-7169 Shell Shock

CVE-2014-7169CRITICALbajo ataque24 jul 2022

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RIESGO

abrir ↗

GitHub PoC★ 7

远程攻击者在Confluence未经身份验证的情况下，可构造OGNL表达式进行注入，实现在Confluence Server或Data Center上执行任意代码,在现有脚本上修改了poc，方便getshell。

CVE-2022-26134CRITICALbajo ataqueransomware23 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.