Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.449exploits catalogados

35.552CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientes populares riesgo

77.401 exploits

GitHub PoC

Este es un código del exploit CVE-2022-46169, que recree utilizando Python3! Si por ahí estás haciendo una máquina de HTB, esto te puede ser útil... 🤞✨

CVE-2022-46169CRITICALbajo ataque02 may 2023

Unauthenticated Command Injection

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALbajo ataque02 may 2023

Unauthenticated Command Injection

100RIESGO

GitHub PoC★ 1

Improved PoC for Unauthenticated RCE on Cacti <= 1.2.22 - CVE-2022-46169

CVE-2022-46169CRITICALbajo ataque02 may 2023

Unauthenticated Command Injection

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALbajo ataque02 may 2023

Unauthenticated Command Injection

100RIESGO

Exploit-DB

FS-S3900-24T4S - Privilege Escalation

CVE-2023-30350HIGHlocalhardware02 may 2023

FS S3900-24T4S devices allow authenticated attackers with guest access to escalate their privileges and reset the admin

41RIESGO

Exploit-DB

MilleGPG5 5.9.2 (Gennaio 2023) - Local Privilege Escalation / Incorrect Access Control

CVE-2023-25438HIGHlocalwindows02 may 2023

An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalat

41RIESGO

VulnCheck XDB

client-side

CVE-2022-30190HIGHbajo ataqueransomware02 may 2023

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

An exploitation of CVE-2022-30190 (Follina)

CVE-2022-30190HIGHbajo ataqueransomware02 may 2023

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-3129CRITICALbajo ataqueransomware01 may 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALbajo ataque01 may 2023

Unauthenticated Command Injection

100RIESGO

GitHub PoC★ 3

Exploit for cacti version 1.2.22

CVE-2022-46169CRITICALbajo ataque01 may 2023

Unauthenticated Command Injection

100RIESGO

VulnCheck XDB

local

CVE-2023-32784HIGH01 may 2023

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work

41RIESGO

GitHub PoC★ 42

This is a exploit of CVE-2022-46169 to cacti 1.2.22. This exploit allows through an RCE to obtain a reverse shell on your computer.

CVE-2022-46169CRITICALbajo ataque01 may 2023

Unauthenticated Command Injection

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALbajo ataque01 may 2023

Unauthenticated Command Injection

100RIESGO

GitHub PoC

Zoo1sondv/CVE-2021-3129

CVE-2021-3129CRITICALbajo ataqueransomware01 may 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

GitHub PoC

tuankiethkt020/Phat-hien-CVE-2017-8464

CVE-2017-8464HIGHbajo ataque01 may 2023

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RIESGO

Metasploit600

Sharepoint Dynamic Proxy Generator Unauth RCE

CVE-2023-29357CRITICALbajo ataqueransomware01 may 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RIESGO

Metasploit600

Sharepoint Dynamic Proxy Generator Unauth RCE

CVE-2023-24955HIGHbajo ataqueransomware01 may 2023

Microsoft SharePoint Server Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

zPrototype/CVE-2023-29809

CVE-2023-29809CRITICAL30 abr 2023

SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbit

53RIESGO

GitHub PoC★ 2

Akash7350/CVE-2020-1472

CVE-2020-1472MEDIUMbajo ataqueransomware30 abr 2023

Netlogon Elevation of Privilege Vulnerability

100RIESGO

GitHub PoC

gretchenfrage/CVE-2023-2033-analysis

CVE-2023-2033HIGHbajo ataque30 abr 2023

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corr

83RIESGO

GitHub PoC

MrE-Fog/CVE-2014-0160-Chrome-Plugin

CVE-2014-0160HIGHbajo ataque30 abr 2023

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

GitHub PoC

CVE-2022-46169

CVE-2022-46169CRITICALbajo ataque30 abr 2023

Unauthenticated Command Injection

100RIESGO

GitHub PoC

check cve-2022-0847

CVE-2022-0847HIGHbajo ataque30 abr 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2020-1472MEDIUMbajo ataqueransomware30 abr 2023

Netlogon Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALbajo ataque30 abr 2023

Unauthenticated Command Injection

100RIESGO

GitHub PoC

Cisco r042 research

CVE-2023-20025CRITICAL30 abr 2023

A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers co

48RIESGO

VulnCheck XDB

initial-access

CVE-2022-46169CRITICALbajo ataque29 abr 2023

Unauthenticated Command Injection

100RIESGO

GitHub PoC

PoC for CVE-2022-46169 that affects Cacti 1.2.22 version

CVE-2022-46169CRITICALbajo ataque29 abr 2023

Unauthenticated Command Injection

100RIESGO

GitHub PoC

zPrototype/CVE-2023-29983

CVE-2023-29983MEDIUM29 abr 2023

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary co

33RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.