Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados

35.370CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientes populares riesgo

77.151 exploits

VulnCheck XDB

remote-with-credentials

CVE-2020-13942—20 dic 2023

Remote Code Execution in Apache Unomi

50RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMbajo ataque20 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-24488MEDIUM20 dic 2023

Cross site scripting

70RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2010-0738MEDIUMbajo ataqueransomware20 dic 2023

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

100RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMbajo ataque20 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-23397CRITICALbajo ataque20 dic 2023

Microsoft Outlook Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMbajo ataque20 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-3519CRITICALbajo ataqueransomware20 dic 2023

Unauthenticated remote code execution

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2023-24055—20 dic 2023

KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file,

23RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-26134CRITICALbajo ataqueransomware20 dic 2023

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-1472MEDIUMbajo ataqueransomware20 dic 2023

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMbajo ataque20 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22965CRITICALbajo ataque20 dic 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-32235HIGH20 dic 2023

Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2

68RIESGO

abrir ↗

Metasploit600

Cacti RCE via SQLi in pollers.php

CVE-2023-49084HIGH20 dic 2023

Local File Inclusion (RCE) in Cacti

48RIESGO

abrir ↗

Metasploit600

Cacti RCE via SQLi in pollers.php

CVE-2023-49085HIGH20 dic 2023

Cacti SQL Injection vulnerability

58RIESGO

abrir ↗

GitHub PoC

OwnCloud CVE-2023-49103

CVE-2023-49103CRITICALbajo ataque19 dic 2023

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies

100RIESGO

abrir ↗

GitHub PoC

Binaries for "CVE-2023-23752"

CVE-2023-23752MEDIUMbajo ataque19 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 25

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

CVE-2023-4863HIGHbajo ataque19 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMbajo ataque19 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2023-4863HIGHbajo ataque19 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMbajo ataque18 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 1

Arszilla/CVE-2023-6538

CVE-2023-6538HIGH18 dic 2023

System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.

41RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-11651CRITICALbajo ataque18 dic 2023

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RIESGO

abrir ↗

GitHub PoC

An implementation of a proof-of-concept for CVE-2018-5767

CVE-2018-5767—18 dic 2023

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code

35RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-12124—18 dic 2023

A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.1

60RIESGO

abrir ↗

GitHub PoC

An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints within Joomla! CMS versions 4.0.0 through 4.2.7. This vulnerability could be exploited by attackers to gain unauthorized access to sensitive information or perform unauthorized actions.

CVE-2023-23752MEDIUMbajo ataque18 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC

Repository that contains a CVE-2020-11651 Exploit updated to work with the latest versions of python.

CVE-2020-11651CRITICALbajo ataque18 dic 2023

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RIESGO

abrir ↗

GitHub PoC

jee web project with log4shell (CVE-2021-44228) vulnerability

CVE-2021-44228CRITICALbajo ataqueransomware18 dic 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 54

LiveOverflow/webp-CVE-2023-4863

CVE-2023-4863HIGHbajo ataque18 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.