Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 11

A script to check if a container environment is vulnerable to container escapes via CVE-2022-0492

CVE-2022-0492HIGHbajo ataque06 mar 2022

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

86RIESGO

abrir ↗

GitHub PoC★ 2

22ke/CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque05 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 1

puckiestyle/CVE-2021-3156

CVE-2021-3156HIGHbajo ataque04 mar 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 5

Greetdawn/CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

Exp

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 8

9lyph/CVE-2022-29593

CVE-2022-29593MEDIUM04 mar 2022

relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post reques

38RIESGO

abrir ↗

GitHub PoC

日常更新一些顺手写的gobypoc，包含高危害EXP

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

CVE-2019-11043 LAB

CVE-2019-11043HIGHbajo ataqueransomware04 mar 2022

Underflow in PHP-FPM can lead to RCE

100RIESGO

abrir ↗

GitHub PoC★ 72

CVE-2022-22947批量

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

CVE-2022-22947批量检测脚本，回显命令没进行正则，大佬们先用着，后续再更

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 3

Spring-Cloud-Gateway-CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

Spring Cloud Gateway远程代码执行漏洞

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 9

cve-2022-22947 spring cloud gateway 批量扫描脚本

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 2

Spring Cloud Gateway Actuator API 远程命令执行 CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 7

批量url检测Spring-Cloud-Gateway-CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque04 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

port of CVE-2021-4034 exploit to Rust/cargo for my own edification

CVE-2021-4034HIGHbajo ataqueransomware04 mar 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 37

Spring Cloud Gateway < 3.0.7 & < 3.1.1 Code Injection (RCE)

CVE-2022-22947CRITICALbajo ataque03 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

This repository contains files for reproducing the vulnerability.

CVE-2021-43798HIGHbajo ataque03 mar 2022

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC

Test tool for CVE-2020-1472

CVE-2020-1472MEDIUMbajo ataqueransomware03 mar 2022

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC

CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware03 mar 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 77

Spring Cloud Gateway 远程代码执行漏洞Exp Spring_Cloud_Gateway_RCE_Exp-CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque03 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 27

SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er

CVE-2022-22947CRITICALbajo ataque03 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 10

Spring cloud gateway code injection : CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque03 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 1

Zero-day-scanning is a Domain Controller vulnerability scanner, that currently includes checks for Zero-day-scanning (CVE-2020-1472), MS-PAR/MS-RPRN and SMBv2 Signing.

CVE-2020-1472MEDIUMbajo ataqueransomware03 mar 2022

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC

poc for cve-2022-22947

CVE-2022-22947CRITICALbajo ataque03 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 4

A "Creation of Temporary Files in Directory with Insecure Permissions" vulnerability in PrintixService.exe, in Printix's "Printix Secure Cloud Print Management", Version 1.3.1106.0 and below allows any logged in user to elevate any executable or file to the SYSTEM context. This is achieved by exploiting race conditions in the Installer.

CVE-2022-25090—02 mar 2022

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure

28RIESGO

abrir ↗

GitHub PoC

polkit-pkexec local privilege escalation vulnerability

CVE-2021-4034HIGHbajo ataqueransomware02 mar 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

takumak/cve-2019-5736-reproducer

CVE-2019-5736—02 mar 2022

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RIESGO

abrir ↗

GitHub PoC★ 222

CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque02 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

Tools for get offsets and adding patch for support i386

CVE-2018-1000001—01 mar 2022

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before th

43RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.