Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados

35.370CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientes populares riesgo

77.151 exploits

GitHub PoC★ 27

An authorized remote user with access or knowledge of the standard encryption key can gain access and decrypt the FortiOS backup files and all non-administator passwords, private keys and High Availability passwords.

CVE-2019-6693MEDIUMbajo ataqueransomware08 dic 2023

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RIESGO

VulnCheck XDB

local

CVE-2019-6693MEDIUMbajo ataqueransomware08 dic 2023

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RIESGO

GitHub PoC★ 8

CVE-2023-50643

CVE-2023-50643CRITICAL08 dic 2023

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode a

48RIESGO

GitHub PoC

Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.

CVE-2023-4966CRITICALbajo ataqueransomware08 dic 2023

Unauthenticated sensitive information disclosure

100RIESGO

GitHub PoC

Check for and remediate conditions that make an IOS-XE device vulnerable to CVE-2023-20198

CVE-2023-20198CRITICALbajo ataque08 dic 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

GitHub PoC★ 1

POC&EXP for GlassFish<4.1.1(not including 4.1.1).

CVE-2017-1000028—07 dic 2023

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RIESGO

GitHub PoC★ 2

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware07 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 1

CVE-2023-28432 Minio Information isclosure Exploit

CVE-2023-28432HIGHbajo ataque07 dic 2023

Minio Information Disclosure in Cluster Deployment

100RIESGO

GitHub PoC

ag-rodriguez/CVE-2023-24078

CVE-2023-24078HIGH07 dic 2023

Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c

53RIESGO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALbajo ataqueransomware07 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-28432HIGHbajo ataque07 dic 2023

Minio Information Disclosure in Cluster Deployment

100RIESGO

VulnCheck XDB

infoleak

CVE-2017-1000028—07 dic 2023

Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave

60RIESGO

GitHub PoC★ 2

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

CVE-2021-44228CRITICALbajo ataqueransomware07 dic 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

GitHub PoC★ 895

BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).

CVE-2026-3609MEDIUM05 dic 2023

XIGNCODE3 xhunter1.sys kernel driver contains a Privilege Escalation Vulnerability

33RIESGO

GitHub PoC★ 4

Thực nghiệm CVE-2021-44790

CVE-2021-44790—05 dic 2023

Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

45RIESGO

GitHub PoC★ 38

ownCloud exploits for CVE-2023-49105

CVE-2023-49105CRITICAL05 dic 2023

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file wit

53RIESGO

GitHub PoC

Proof-of-concept of CVE-2023-38831

CVE-2023-38831HIGHbajo ataqueransomware04 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

GitHub PoC★ 4

thanhlam-attt/CVE-2023-25690

CVE-2023-25690CRITICAL04 dic 2023

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RIESGO

VulnCheck XDB

local

CVE-2019-5736—04 dic 2023

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RIESGO

GitHub PoC

CygnusX-26/CVE-2022-44268-fixed-PoC

CVE-2022-44268MEDIUM04 dic 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

GitHub PoC★ 1

For Aina

CVE-2023-2024CRITICAL04 dic 2023

Improper Authentication for OpenBlue Enterprise Manager Data Collector

48RIESGO

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMbajo ataque04 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-25690CRITICAL04 dic 2023

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RIESGO

GitHub PoC★ 17

A PoC exploit for CVE-2023-23752 - Joomla Improper Access Check in Versions 4.0.0 through 4.2.7

CVE-2023-23752MEDIUMbajo ataque04 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

VulnCheck XDB

client-side

CVE-2023-38831HIGHbajo ataqueransomware04 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

GitHub PoC★ 2

A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432

CVE-2023-21839HIGHbajo ataque03 dic 2023

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

100RIESGO

GitHub PoC★ 2

A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432

CVE-2022-39197MEDIUMbajo ataque03 dic 2023

An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote att

75RIESGO

GitHub PoC★ 1

Demonstration of CVE-2023-24034 authorization bypass in Spring Security

CVE-2023-34034CRITICAL02 dic 2023

Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spr

48RIESGO

GitHub PoC★ 6

creacitysec/CVE-2023-48842

CVE-2023-48842CRITICAL02 dic 2023

D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at

48RIESGO

GitHub PoC★ 1

Under Construction :) Please come back later

CVE-2017-18019—01 dic 2023

In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.