Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 1175

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 15

Bash implementation of CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 114

PoC for CVE-2021-4034 dubbed pwnkit

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 2

gbrsh/CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 24

PoC for the CVE-2021-4034 vulnerability, affecting polkit < 0.120.

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 6

clubby789/CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 4

Y3A/CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

jostmart/-CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 2

Linux system service bug gives root on all major distros, exploit published A vulnerability in the pkexec component of Polkit identified as CVE-2021-4034 PwnKit is present in the default configuration of all major Linux distributions and can be exploited to gain privileges over the compj researchers.

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

phvilasboas/CVE-2021-4034

CVE-2021-4034HIGHbajo ataqueransomware26 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 2047

CVE-2021-4034 1day

CVE-2021-4034HIGHbajo ataqueransomware25 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 46

numanturle/CVE-2022-0332

CVE-2022-0332—25 ene 2022

A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web serv

35RIESGO

abrir ↗

GitHub PoC★ 26

Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion

CVE-2022-21371HIGH25 ene 2022

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported ve

78RIESGO

abrir ↗

GitHub PoC★ 74

Local Privilege Escalation in polkit's pkexec

CVE-2021-4034HIGHbajo ataqueransomware25 ene 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC

Exploit-WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read

CVE-2021-39312HIGH24 ene 2022

True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

78RIESGO

abrir ↗

GitHub PoC★ 2

Strapi CMS 3.0.0-beta.17.4 - Unauthenticated Remote Code Execution (CVE-2019-18818, CVE-2019-19609)

CVE-2019-19609—23 ene 2022

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c

35RIESGO

abrir ↗

GitHub PoC★ 28

CVE-2022-21907 Vulnerability PoC

CVE-2022-21907CRITICAL23 ene 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 1

jcarabantes/CVE-2022-23046

CVE-2022-23046—22 ene 2022

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a su

28RIESGO

abrir ↗

GitHub PoC★ 5

test 反向辣鸡数据投放 CVE-2022-23305 工具利用教程 Exploit POC

CVE-2022-23305CRITICAL21 ene 2022

SQL injection in JDBC Appender in Apache Log4j V1

60RIESGO

abrir ↗

GitHub PoC

Testing WAF protection against CVE-2021-44228 Log4Shell

CVE-2021-44228CRITICALbajo ataqueransomware20 ene 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 25

💀 Linux local root exploit for CVE-2018-18955

CVE-2018-18955—19 ene 2022

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat

38RIESGO

abrir ↗

GitHub PoC★ 375

CVE-2022-0185

CVE-2022-0185HIGHbajo ataque19 ene 2022

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio

76RIESGO

abrir ↗

GitHub PoC

It is a nmap script for GravCMS vulnerability (CVE-2021-21425)

CVE-2021-21425CRITICAL19 ene 2022

Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

85RIESGO

abrir ↗

GitHub PoC★ 2

POC for Infamous Log4j CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware18 ene 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 1

aymenbouferroum/CVE-2021-43798_exploit

CVE-2021-43798HIGHbajo ataque18 ene 2022

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC

Static detection of vulnerable log4j librairies on Windows servers, members of an AD domain.

CVE-2021-44228CRITICALbajo ataqueransomware17 ene 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 82

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

CVE-2022-21907CRITICAL17 ene 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 359

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907

CVE-2022-21907CRITICAL17 ene 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC

KasunPriyashan/Y2S1-Project-Linux-Exploitaion-using-CVE-2016-5195-Vulnerability

CVE-2016-5195HIGHbajo ataque17 ene 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC

A Java application intentionally vulnerable to CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware16 ene 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.