Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC

Mitigation/fix of CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache

CVE-2021-41773HIGHbajo ataqueransomware22 jul 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 8

CVE-2022-23131漏洞批量检测与利用脚本

CVE-2022-23131CRITICALbajo ataque22 jul 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

abrir ↗

GitHub PoC★ 31

Atlassian Questions Hardcoded Password (CVE-2022-26138)

CVE-2022-26138CRITICALbajo ataque21 jul 2022

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th

100RIESGO

abrir ↗

GitHub PoC★ 3

Detection and Remediation of the Follina MSDT Vulnerability (CVE-2022-30190)

CVE-2022-30190HIGHbajo ataqueransomware21 jul 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2019-17621 DLink_RCE

CVE-2019-17621CRITICALbajo ataque20 jul 2022

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated rem

100RIESGO

abrir ↗

GitHub PoC★ 12

CVE-2021-22205 检测脚本,支持getshell和命令执行

CVE-2021-22205CRITICALbajo ataqueransomware20 jul 2022

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

abrir ↗

GitHub PoC★ 3

AkbarTrilaksana/cve-2022-33891

CVE-2022-33891HIGHbajo ataque20 jul 2022

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

GitHub PoC★ 1

NeoWans/CVE-2018-19246

CVE-2018-19246—20 jul 2022

PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users w

28RIESGO

abrir ↗

GitHub PoC

CVE-2007-2447 samba remote code execution

CVE-2007-2447—20 jul 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC★ 6

CVE-2017-7921-EXP Hikvision camera

CVE-2017-7921CRITICALbajo ataque20 jul 2022

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2022-33891

CVE-2022-33891HIGHbajo ataque20 jul 2022

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

GitHub PoC★ 89

Apache Spark Shell Command Injection Vulnerability

CVE-2022-33891HIGHbajo ataque19 jul 2022

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

GitHub PoC★ 31

ManageEngine PAM360, Password Manager Pro, and Access Manager Plus unauthenticated remote code execution vulnerability PoC-exploit

CVE-2022-35405CRITICALbajo ataque18 jul 2022

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code

100RIESGO

abrir ↗

GitHub PoC★ 51

cve-2022-33891-poc

CVE-2022-33891HIGHbajo ataque18 jul 2022

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

GitHub PoC★ 14

CVE-2021-36955

CVE-2021-36955HIGHbajo ataqueransomware18 jul 2022

Windows Common Log File System Driver Elevation of Privilege Vulnerability

71RIESGO

abrir ↗

GitHub PoC

GitStackRCE漏洞(CVE-2018-5955)EXP

CVE-2018-5955—18 jul 2022

An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unau

60RIESGO

abrir ↗

GitHub PoC

Unquoted Service Path Asus GameSdk

CVE-2022-35899—18 jul 2022

There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local

23RIESGO

abrir ↗

GitHub PoC★ 2

ooooooo-q/cve-2022-32224-rails

CVE-2022-32224CRITICAL17 jul 2022

A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.

48RIESGO

abrir ↗

GitHub PoC★ 1

Lay0us/CVE-2022-0848-RCE

CVE-2022-0848CRITICAL15 jul 2022

OS Command Injection in part-db/part-db

60RIESGO

abrir ↗

GitHub PoC★ 12

Just simple PoC for the Atlassian Jira exploit. Provides code execution for unauthorised user on a server.

CVE-2022-26134CRITICALbajo ataqueransomware15 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 2

Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm

CVE-2020-3580MEDIUMbajo ataqueransomware15 jul 2022

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities

100RIESGO

abrir ↗

GitHub PoC★ 14

rbowes-r7/unrar-cve-2022-30333-poc

CVE-2022-30333CRITICALbajo ataqueransomware15 jul 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RIESGO

abrir ↗

GitHub PoC

supportingmx/cve-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware15 jul 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-26134-PoC

CVE-2022-26134CRITICALbajo ataqueransomware14 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC

CVE-2021-46422_PoC

CVE-2021-46422—14 jul 2022

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RIESGO

abrir ↗

GitHub PoC★ 1

kmahyyg/CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque12 jul 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 2

This is a python script that can be used with Shodan CLI to mass hunting Confluence Servers vulnerable to CVE-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware12 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 1

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.

CVE-2009-4049—10 jul 2022

Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows loca

23RIESGO

abrir ↗

GitHub PoC

Tatsu Plugin ZIP File add_custom_font unrestricted upload

CVE-2021-25094—10 jul 2022

Tatsu < 3.3.12 - Unauthenticated RCE

60RIESGO

abrir ↗

GitHub PoC★ 1

GILANG - Exploiter for CVE-2021-25094

CVE-2021-25094—10 jul 2022

Tatsu < 3.3.12 - Unauthenticated RCE

60RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.