Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 1

Multiple Stored XSS Online Doctor Appointment System

CVE-2021-25791—16 ago 2021

Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment S

23RIESGO

abrir ↗

GitHub PoC★ 1

tools for automate configure Ubuntu 20.04 enviroment for testing CVE-2021-28476.

CVE-2021-28476CRITICAL15 ago 2021

Windows Hyper-V Remote Code Execution Vulnerability

60RIESGO

abrir ↗

GitHub PoC

The Heartbleed bug `CVE-2014-0160` is a severe implementation flaw in the OpenSSL library, which enables attackers to steal data from the memory of the victim server. The contents of the stolen data depend on what is there in the memory of the server. It could potentially contain private keys, TLS session keys, usernames, passwords, credit cards, etc. The vulnerability is in the implementation of the Heartbeat protocol, which is used by SSL/TLS to keep the connection alive.

CVE-2014-0160HIGHbajo ataque15 ago 2021

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

abrir ↗

GitHub PoC★ 1

An implementation of CVE-2020-1938

CVE-2020-1938CRITICALbajo ataque14 ago 2021

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RIESGO

abrir ↗

GitHub PoC★ 3

WordPress File Upload Vulnerability, Modern Events Calendar Lite WordPress plugin before 5.16.5

CVE-2021-24145—14 ago 2021

Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE

60RIESGO

abrir ↗

GitHub PoC

WpDiscuz 7.0.4 Arbitrary File Upload Exploit

CVE-2020-24186CRITICAL13 ago 2021

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo

85RIESGO

abrir ↗

GitHub PoC★ 1

Sudo Heap Overflow Baron Samedit

CVE-2021-3156HIGHbajo ataque13 ago 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 3

Exploit for CVE-2021-36934

CVE-2021-36934HIGHbajo ataque12 ago 2021

Windows Elevation of Privilege Vulnerability

98RIESGO

abrir ↗

GitHub PoC★ 5

Scanner for CVE-2021-34473, ProxyShell, A Microsoft Exchange On-premise Vulnerability

CVE-2021-34473CRITICALbajo ataqueransomware11 ago 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

Jerry-zhuang/CVE-2017-1000117

CVE-2017-1000117—11 ago 2021

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RIESGO

abrir ↗

GitHub PoC

Zeek Package to detect cve-2017-2741

CVE-2017-2741—11 ago 2021

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmwa

60RIESGO

abrir ↗

GitHub PoC★ 10

Windows Font Driver Type 1 VToHOrigin stack corruption

CVE-2020-1020HIGHbajo ataque10 ago 2021

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly

83RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2019-11043

CVE-2019-11043HIGHbajo ataqueransomware10 ago 2021

Underflow in PHP-FPM can lead to RCE

100RIESGO

abrir ↗

GitHub PoC★ 1

OlivierLaflamme/CVE-2021-36934-export-shadow-volume-POC

CVE-2021-36934HIGHbajo ataque10 ago 2021

Windows Elevation of Privilege Vulnerability

98RIESGO

abrir ↗

GitHub PoC★ 46

nuclei scanner for proxyshell ( CVE-2021-34473 )

CVE-2021-34473CRITICALbajo ataqueransomware10 ago 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

ZeroShell命令执行漏洞批量扫描poc+exp

CVE-2019-12725—10 ago 2021

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RIESGO

abrir ↗

GitHub PoC

CVE-2021-2109 basic scanner

CVE-2021-2109HIGH09 ago 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

63RIESGO

abrir ↗

GitHub PoC★ 9

BabyTeam1024/CVE-2021-2394

CVE-2021-2394CRITICAL08 ago 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

70RIESGO

abrir ↗

GitHub PoC

Very basic bash script to exploit the CVE-2019-6447.

CVE-2019-6447—08 ago 2021

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC

Modified version of CVE-2019-5736-PoC by Frichetten

CVE-2019-5736—07 ago 2021

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RIESGO

abrir ↗

GitHub PoC★ 1

this script is exploit for wordpress old plugin gwolle

CVE-2015-8351—06 ago 2021

PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_includ

35RIESGO

abrir ↗

GitHub PoC

CVE-2020-35847, CVE-2020-35848 : Account Takeover

CVE-2020-35847—06 ago 2021

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

60RIESGO

abrir ↗

GitHub PoC★ 4

Pastea/CVE-2017-1000486

CVE-2017-1000486CRITICALbajo ataque05 ago 2021

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RIESGO

abrir ↗

GitHub PoC★ 1

An implementation of CVE-2017-5638

CVE-2017-5638CRITICALbajo ataqueransomware04 ago 2021

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

abrir ↗

GitHub PoC

Windows Elevation of Privilege Vulnerability CVE-2021-36934

CVE-2021-36934HIGHbajo ataque04 ago 2021

Windows Elevation of Privilege Vulnerability

98RIESGO

abrir ↗

GitHub PoC★ 4

s4dbrd/CVE-2020-9496

CVE-2020-9496—04 ago 2021

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RIESGO

abrir ↗

GitHub PoC★ 1

An implementation of CVE-2016-8740

CVE-2016-8740—03 ago 2021

The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2

45RIESGO

abrir ↗

GitHub PoC★ 40

POC of CVE-2021-2394

CVE-2021-2394CRITICAL02 ago 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

70RIESGO

abrir ↗

GitHub PoC★ 20

POC of CVE-2021-2394

CVE-2021-2394CRITICAL02 ago 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

70RIESGO

abrir ↗

GitHub PoC★ 28

AssassinUKG/CVE-2021-22204

CVE-2021-22204MEDIUMbajo ataque02 ago 2021

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.