Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
18.044 exploits
GitHub PoC★ 3
PenTestical/CVE-2021-22204
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RIESGO
abrir ↗GitHub PoC★ 2
POC experiments with Volume Shadow copy Service (VSS)
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 28
AssassinUKG/CVE-2021-22204
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RIESGO
abrir ↗GitHub PoC★ 5
My n-day exploit for CVE-2019-18634 (local privilege escalation)
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the
28RIESGO
abrir ↗GitHub PoC★ 10
WordPress Backup Guard Authenticated Remote Code Execution Exploit
Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload
60RIESGO
abrir ↗GitHub PoC★ 1
Exploit for CVE-2018-3810
Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unau
60RIESGO
abrir ↗GitHub PoC★ 9
Polkit D-Bus Authentication Bypass Exploit
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗GitHub PoC★ 10
Full unauthenticated RCE proof of concept for Rocket.Chat 3.12.1 CVE-2021-22911
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti
60RIESGO
abrir ↗GitHub PoC★ 1
Exploit for CVE-2019-10149
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(
100RIESGO
abrir ↗GitHub PoC★ 1
CVE-2021-36934 HiveNightmare vulnerability checker and workaround
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 15
Shellshock exploit aka CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗GitHub PoC
CVE-2018-9276 PRTG < 18.2.39 Reverse Shell (Python3 support)
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra
100RIESGO
abrir ↗GitHub PoC★ 1
Exploit for CVE-2018-12636
The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admi
28RIESGO
abrir ↗GitHub PoC★ 1
Local Privilege Escalation via snapd (CVE-2019-7304) Remastered PoC exploit
Local privilege escalation via snapd socket
53RIESGO
abrir ↗GitHub PoC★ 2
NYCY_homework_&_meeting
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗GitHub PoC★ 3
To fight against Windows security breach PrintNightmare! (CVE-2021-34527, CVE-2021-1675)
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC★ 1
An implementation of CVE-2017-12617
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT
100RIESGO
abrir ↗GitHub PoC★ 7
HiveNightmare aka SeriousSAM
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC
Exodusro/CVE-2021-3156
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗GitHub PoC★ 3
haidv35/CVE-2021-21972
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗GitHub PoC★ 5
PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM written in python3
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC
This PowerShell script will take the mitigation measures for CVE-2021-36934 described by Microsoft and the US CERT team. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 USE AT YOUR OWN RISK -- BACKUPS MAY BREAK.
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 3
C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 1
This Repo is PoC environment of CVE-2014-6271(https://nvd.nist.gov/vuln/detail/cve-2014-6271).
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗GitHub PoC
Exploit Analysis of The WhatsApp Double-Free Vulnerability (CVE-2019-11932) Using the GEF-GDB Debugger
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RIESGO
abrir ↗GitHub PoC
3t4n/samba-3.0.24-CVE-2007-2447-vunerable-
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RIESGO
abrir ↗GitHub PoC★ 1
A capability to identify and remediate CVE-2021-36934 (HiveNightmare)
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 1
idea-oss/laravel-CVE-2021-3129-EXP
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.