Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 22

the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

CVE-2021-22005CRITICALbajo ataqueransomware02 oct 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RIESGO

abrir ↗

GitHub PoC★ 16

POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)

CVE-2021-34523CRITICALbajo ataqueransomware02 oct 2021

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

puckiestyle/CVE-2021-3493

CVE-2021-3493HIGHbajo ataque02 oct 2021

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RIESGO

abrir ↗

GitHub PoC★ 1

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.

CVE-2019-17662—01 oct 2021

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exi

60RIESGO

abrir ↗

GitHub PoC★ 1

daletoniris/CVE-2021-22555-esc-priv

CVE-2021-22555HIGHbajo ataque01 oct 2021

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RIESGO

abrir ↗

GitHub PoC

CloudMe CVE-2018-6892 POC

CVE-2018-6892—01 oct 2021

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RIESGO

abrir ↗

GitHub PoC★ 12

PoC for CVE-2021-3129 (Laravel)

CVE-2021-3129CRITICALbajo ataqueransomware01 oct 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 12

Simple Serv-U CVE-2021-35211 PoC

CVE-2021-35211CRITICALbajo ataqueransomware30 sep 2021

Serv-U Remote Memory Escape Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 28

Cisco RV110w UPnP stack overflow

CVE-2021-34730CRITICAL30 sep 2021

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

53RIESGO

abrir ↗

GitHub PoC

CVE-2021-25162

CVE-2021-25162—29 sep 2021

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

28RIESGO

abrir ↗

GitHub PoC

According to researchers with Rapid7, over 110,000 devices appear on internet, which run stable Samba versions, while 92,500 seem to run unstable Samba versions, for which there is no fix. The newest Samba models, including the models 4.6.x before 4.6.4, 4.5.x before 4.5.10 and 3.5.0 before 4.4.13, was impacted by this error. May 24, 2017, Samba released version 4.6.4, which fixes a serious remote code execution vulnerability, vulnerability number CVE-2017-7494, which affected Samba 3.5.0 onwards. Vulnerability number: CVE-2017-7494 Severity Rating: High Affected software: • Samba Version < 4.6.4 • Samba Version < 4.5.10 • Samba Version < 4.4.14 Unaffected software: • Samba Version = 4.6.4 • Samba Version = 4.5.10 • Samba Version = 4.4.14

CVE-2017-7494CRITICALbajo ataqueransomware29 sep 2021

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

abrir ↗

GitHub PoC

漏洞复现与poc收集，CVE-2021-21975，cve-2021-22005，CVE-2021-26295，VMware vCenter任意文件读取

CVE-2021-21975CRITICALbajo ataqueransomware29 sep 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RIESGO

abrir ↗

GitHub PoC★ 5

This docx exploit uses res files inside Microsoft .docx file to execute malicious files. This exploit is related to CVE-2021-40444

CVE-2021-40444HIGHbajo ataqueransomware29 sep 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 37

rwincey/CVE-2021-22005

CVE-2021-22005CRITICALbajo ataqueransomware28 sep 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RIESGO

abrir ↗

GitHub PoC★ 14

CrackerCat/CVE-2021-30632

CVE-2021-30632HIGHbajo ataque28 sep 2021

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c

83RIESGO

abrir ↗

GitHub PoC

Sudo heap-based buffer overflow privilege escalation commands and mitigations.

CVE-2021-3156HIGHbajo ataque27 sep 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 2

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution.

CVE-2018-16763—27 sep 2021

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2021-22005_PoC

CVE-2021-22005CRITICALbajo ataqueransomware27 sep 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2019-19781

CVE-2019-19781CRITICALbajo ataqueransomware27 sep 2021

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 19

Windows HTTP协议栈远程代码执行漏洞 CVE-2021-31166

CVE-2021-31166CRITICALbajo ataque27 sep 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

Quick and dirty CVE-2021-38647 (Omigod) exploit written in Go.

CVE-2021-38647CRITICALbajo ataqueransomware26 sep 2021

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 209

Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)

CVE-2021-1675HIGHbajo ataqueransomware26 sep 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 10

C# PrintNightmare (CVE-2021-1675)

CVE-2021-1675HIGHbajo ataqueransomware26 sep 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

AmesianX/CVE-2021-21220

CVE-2021-21220HIGHbajo ataque26 sep 2021

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to po

100RIESGO

abrir ↗

GitHub PoC★ 1

Python script to obtain RCE on Mantis Bug Tracker prior to version 1.2.x Check CVE-2008-4687 for additional information

CVE-2008-4687—25 sep 2021

manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort param

50RIESGO

abrir ↗

GitHub PoC★ 13

CVE-2021-22005批量验证python脚本

CVE-2021-22005CRITICALbajo ataqueransomware25 sep 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RIESGO

abrir ↗

GitHub PoC★ 17

CVE-2021-3156 - sudo exploit for ubuntu 18.04 & 20.04

CVE-2021-3156HIGHbajo ataque25 sep 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 1

BeneficialCode/CVE-2021-1732

CVE-2021-1732HIGHbajo ataqueransomware24 sep 2021

Windows Win32k Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

Windows Kernel Registry Elevation of Privilege Vulnerability

CVE-2018-8410—24 sep 2021

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory

23RIESGO

abrir ↗

GitHub PoC

CVE 2021 40444 Windows Exploit services.dll

CVE-2021-40444HIGHbajo ataqueransomware24 sep 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.