Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC

0xF331-D3AD/CVE-2012-2982

CVE-2012-2982—16 jun 2022

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RIESGO

abrir ↗

GitHub PoC

notherealhazard/follina-CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware15 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

follina zero day vulnerability to help Microsoft to mitigate the attack

CVE-2022-30190HIGHbajo ataqueransomware15 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 31

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

CVE-2022-30190HIGHbajo ataqueransomware15 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

This repository is developed to understand CVE-2019-6447

CVE-2019-6447—15 jun 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC

p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor

CVE-2017-7921CRITICALbajo ataque15 jun 2022

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-22620: Use-after-free in Safari

CVE-2022-22620HIGHbajo ataque14 jun 2022

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS

76RIESGO

abrir ↗

GitHub PoC

WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm

CVE-2017-10271HIGHbajo ataqueransomware14 jun 2022

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RIESGO

abrir ↗

GitHub PoC★ 1

I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits

CVE-2022-24706CRITICALbajo ataque14 jun 2022

Remote Code Execution Vulnerability in Packaging

100RIESGO

abrir ↗

GitHub PoC

ernestak/CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware14 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

ernestak/Sigma-Rule-for-CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware14 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2022-26134 - Pre-Auth Remote Code Execution via OGNL Injection

CVE-2022-26134CRITICALbajo ataqueransomware13 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 2

An Unofficial Patch Follina CVE-2022-30190 (patch) by micrisoft Guidelines.

CVE-2022-30190HIGHbajo ataqueransomware13 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina

CVE-2022-30190HIGHbajo ataqueransomware13 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 106

PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.

CVE-2022-26809CRITICAL13 jun 2022

Remote Procedure Call Runtime Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-30525 POC

CVE-2022-30525CRITICALbajo ataque13 jun 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 1

A OS Command Injection Vulnerability in the CGI Program of Zyxel

CVE-2022-30525CRITICALbajo ataque12 jun 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 2

seymanurmutlu/CVE-2022-24086-CVE-2022-24087

CVE-2022-24086CRITICALbajo ataque12 jun 2022

Adobe Commerce checkout improper input validation leads to remote code execution

100RIESGO

abrir ↗

GitHub PoC

ahmetfurkans/CVE-2022-22718

CVE-2022-22718HIGHbajo ataque12 jun 2022

Windows Print Spooler Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC

Log4Shell CVE-2021-44228 Demo

CVE-2021-44228CRITICALbajo ataqueransomware12 jun 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC

These are the source codes of the Python scripts to apply the temporary protection against the CVE-2022-30190 vulnerability (Follina)

CVE-2022-30190HIGHbajo ataqueransomware12 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability (Follina)

CVE-2022-30190HIGHbajo ataqueransomware11 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

Practising technical writing with researching CVE-2022-22954 VMware Workspace ONE Access RCE vulnerability.

CVE-2022-22954CRITICALbajo ataqueransomware11 jun 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 7

PoC for Sourcegraph Gitserver < 3.37.0 RCE (CVE-2022-23642)

CVE-2022-23642HIGH10 jun 2022

Code Injection in Sourcegraph

78RIESGO

abrir ↗

GitHub PoC★ 3

NEW EXPLOIT FOR TP LINK

CVE-2022-30075—10 jun 2022

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

35RIESGO

abrir ↗

GitHub PoC★ 2

proof of concept to CVE-2022-30190 (follina)

CVE-2022-30190HIGHbajo ataqueransomware10 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

To determine if an APK is vulnerable to CVE-2017-13156

CVE-2017-13156—10 jun 2022

An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,

43RIESGO

abrir ↗

GitHub PoC

CVE-2022-26134, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. This is CVE-2022-26134 expoitation script

CVE-2022-26134CRITICALbajo ataqueransomware10 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 1

check CVE-2021-40438

CVE-2021-40438CRITICALbajo ataqueransomware10 jun 2022

mod_proxy SSRF

100RIESGO

abrir ↗

GitHub PoC

Mitigation for CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware10 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.