Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 3

Exploiting Android Vulnerability in ES File Explorer

CVE-2019-6447—08 jul 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC★ 1

confluence rce

CVE-2022-26134CRITICALbajo ataqueransomware08 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 5

CodoForum v5.1 - File Upload Bypass to RCE (Authenticated) exploit code

CVE-2022-31854—07 jul 2022

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin

50RIESGO

abrir ↗

GitHub PoC★ 2

BIGIP CVE-2020-5902 Exploit POC and automation scanning vulnerability

CVE-2020-5902CRITICALbajo ataqueransomware07 jul 2022

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 2

f4yd4-s3c/cve-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware06 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 24

Redis 沙盒逃逸（CVE-2022-0543）POC&EXP

CVE-2022-0543CRITICALbajo ataque06 jul 2022

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific

100RIESGO

abrir ↗

GitHub PoC★ 29

Atlassian Confluence (CVE-2022-26134) - Unauthenticated Remote code execution (RCE)

CVE-2022-26134CRITICALbajo ataqueransomware05 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 4

Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE).

CVE-2022-26134CRITICALbajo ataqueransomware05 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-35513 | blink1-pass-decrypt

CVE-2022-35513—05 jul 2022

The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.

23RIESGO

abrir ↗

GitHub PoC

mq_notify: double sock_put()

CVE-2017-11176—05 jul 2022

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr

23RIESGO

abrir ↗

GitHub PoC★ 2

exp of CVE-2022-0847

CVE-2022-0847HIGHbajo ataque05 jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 2

EXP for Spring4Shell(CVE-2022-22965)

CVE-2022-22965CRITICALbajo ataque05 jul 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC★ 29

An eBPF detection program for CVE-2022-0847

CVE-2022-0847HIGHbajo ataque05 jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 13

TheL1ghtVn/CVE-2022-30333-PoC

CVE-2022-30333CRITICALbajo ataqueransomware05 jul 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RIESGO

abrir ↗

GitHub PoC★ 2

exp of CVE-2022-0847

CVE-2022-0847HIGHbajo ataque05 jul 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-29464 Exploit

CVE-2022-29464CRITICALbajo ataqueransomware05 jul 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 5

Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability

CVE-2021-3156HIGHbajo ataque04 jul 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 30

POC exploit for CVE-2015-10141

CVE-2015-10141CRITICAL04 jul 2022

Xdebug Remote Debugger Unauthenticated OS Command Execution

63RIESGO

abrir ↗

GitHub PoC

CVE-2022-1388, bypassing iControl REST authentication

CVE-2022-1388CRITICALbajo ataqueransomware04 jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 1

Atlassian, CVE-2022-26134 An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability.

CVE-2022-26134CRITICALbajo ataqueransomware04 jul 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC

CVE-2022-24706 POC exploit

CVE-2022-24706CRITICALbajo ataque04 jul 2022

Remote Code Execution Vulnerability in Packaging

100RIESGO

abrir ↗

GitHub PoC

The above investigation of the ES file browser security weakness allows us to see the issue in its entirety

CVE-2019-6447—03 jul 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC★ 5

Ruby反序列化命令执行漏洞（CVE-2019-5420）-vulfocus通关版

CVE-2019-5420—02 jul 2022

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RIESGO

abrir ↗

GitHub PoC★ 13

CVE-2022-2185 poc

CVE-2022-2185CRITICAL02 jul 2022

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

85RIESGO

abrir ↗

GitHub PoC★ 4

Apache Tomcat DoS (CVE-2022-29885) Exploit

CVE-2022-29885—01 jul 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RIESGO

abrir ↗

GitHub PoC★ 1

PoC for exploiting CVE-2022-1388 on BIG IP F5

CVE-2022-1388CRITICALbajo ataqueransomware01 jul 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 136

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

CVE-2021-23017—30 jun 2022

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t

35RIESGO

abrir ↗

GitHub PoC

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

CVE-2022-0847HIGHbajo ataque30 jun 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 1

vesperp/CVE-2021-42237-SiteCore-XP

CVE-2021-42237CRITICALbajo ataqueransomware30 jun 2022

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it

100RIESGO

abrir ↗

GitHub PoC★ 5

Apache Tomcat CVE-2022-29885

CVE-2022-29885—30 jun 2022

EncryptInterceptor does not provide complete protection on insecure networks

45RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.