Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
18.044 exploits
GitHub PoC
A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.
CVE-2022-1388CRITICALbajo ataqueransomware07 may 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RIESGO
abrir ↗
GitHub PoC★ 92
CVE-2022-1388 F5 BIG-IP RCE 批量检测
CVE-2022-1388CRITICALbajo ataqueransomware07 may 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RIESGO
abrir ↗
GitHub PoC★ 2
fuzzing with libFuzzer，inlude openssl heartbleed (CVE-2014-0160)
CVE-2014-0160HIGHbajo ataque07 may 2022
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗
GitHub PoC
Just proof of concept for Cisco CVE-2020-3452. Using external or internal file base.
CVE-2020-3452HIGHbajo ataque07 may 2022
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 1
cve-2022-29464 EXP
CVE-2022-29464CRITICALbajo ataqueransomware07 may 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RIESGO
abrir ↗
GitHub PoC★ 6
WordPress Plugin MasterStudy LMS 2.7.5 - Unauthenticated Admin Account Creation
CVE-2022-0441—06 may 2022
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
60RIESGO
abrir ↗
GitHub PoC
Satheesh575555/external_expat_AOSP10_r33_CVE-2022-25236
CVE-2022-25236CRITICAL06 may 2022
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace
60RIESGO
abrir ↗
GitHub PoC★ 16
may the poc with you
CVE-2022-1040CRITICALbajo ataque06 may 2022
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho
100RIESGO
abrir ↗
GitHub PoC★ 28
This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a control plane issue only.
CVE-2022-1388CRITICALbajo ataqueransomware06 may 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RIESGO
abrir ↗
GitHub PoC★ 25
Simple script realizado en bash, para revisión de múltiples hosts para CVE-2022-1388 (F5)
CVE-2022-1388CRITICALbajo ataqueransomware05 may 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RIESGO
abrir ↗
GitHub PoC★ 1
1
CVE-2022-29464CRITICALbajo ataqueransomware05 may 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RIESGO
abrir ↗
GitHub PoC★ 53
K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388
CVE-2022-1388CRITICALbajo ataqueransomware05 may 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RIESGO
abrir ↗
GitHub PoC
CVE-2022-22954 analyst
CVE-2022-22954CRITICALbajo ataqueransomware05 may 2022
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RIESGO
abrir ↗
GitHub PoC★ 13
PoC of CVE-2022-24707
CVE-2022-24707HIGH03 may 2022
SQL injection in anuko timetracker
41RIESGO
abrir ↗
GitHub PoC
CVE-2018-17553 PoC
CVE-2018-17553—03 may 2022
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs N
60RIESGO
abrir ↗
GitHub PoC★ 12
Exploit for CVE-2021-3560 (Polkit) - Local Privilege Escalation
CVE-2021-3560HIGHbajo ataque02 may 2022
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗
GitHub PoC
Willian-2-0-0-1/Log4j-Exploit-CVE-2021-44228
CVE-2021-44228CRITICALbajo ataqueransomware02 may 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗
GitHub PoC★ 60
yuanLink/CVE-2022-26809
CVE-2022-26809CRITICAL01 may 2022
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RIESGO
abrir ↗
GitHub PoC★ 1
CVE-2021-44228 Log4j Summary
CVE-2021-44228CRITICALbajo ataqueransomware30 abr 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗
GitHub PoC★ 25
PolicyKit CVE-2021-3560 Exploitation (Authentication Agent)
CVE-2021-3560HIGHbajo ataque30 abr 2022
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗
GitHub PoC
Enokiy/spring-RCE-CVE-2022-22965
CVE-2022-22965CRITICALbajo ataque29 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 116
PolicyKit CVE-2021-3560 Exploit (Authentication Agent)
CVE-2021-3560HIGHbajo ataque29 abr 2022
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗
GitHub PoC★ 2
CVE-2022-29464 POC exploit
CVE-2022-29464CRITICALbajo ataqueransomware29 abr 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RIESGO
abrir ↗
GitHub PoC★ 8
This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had.
CVE-2018-19422—29 abr 2022
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, beca
50RIESGO
abrir ↗
GitHub PoC★ 3
for kernel 3.18.x
CVE-2019-2215HIGHbajo ataque28 abr 2022
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RIESGO
abrir ↗
GitHub PoC
RedLeavesChilde/CVE-2021-40444
CVE-2021-40444HIGHbajo ataqueransomware28 abr 2022
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 13
A tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829)
CVE-2022-20829CRITICAL28 abr 2022
Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability
48RIESGO
abrir ↗
GitHub PoC★ 14
CVE-2021-41773&CVE-2021-42013图形化漏洞检测利用工具
CVE-2021-41773HIGHbajo ataqueransomware27 abr 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RIESGO
abrir ↗
GitHub PoC
OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656
CVE-2016-4655MEDIUMbajo ataque27 abr 2022
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
90RIESGO
abrir ↗
GitHub PoC★ 4
khidottrivi/CVE-2022-22965
CVE-2022-22965CRITICALbajo ataque27 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
← anteriorpágina 451 / 602siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.