Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

82.322exploits catalogados
38.524CVEs con explotación pública
24.695probados en laboratorio
82.322 exploits
Metasploit300
Jenkins cli Ampersand Replacement Arbitrary File Read
CVE-2024-23897CRITICALbajo ataqueransomware24 ene 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
GitHub PoC★ 5
CVE-2023-22527
CVE-2023-22527CRITICALbajo ataqueransomware24 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2017-13156—24 ene 2024
An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,
43RIESGO
abrir ↗
GitHub PoC★ 2
This script exploits the CVE-2024-0204 vulnerability in Fortra GoAnywhere MFT, allowing the creation of unauthorized administrative users, for educational and authorized testing purposes.
CVE-2024-0204CRITICAL24 ene 2024
Authentication Bypass in GoAnywhere MFT
85RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-0204CRITICAL24 ene 2024
Authentication Bypass in GoAnywhere MFT
85RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2022-4262HIGHbajo ataque24 ene 2024
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru
76RIESGO
abrir ↗
GitHub PoC★ 58
mistymntncop/CVE-2022-4262
CVE-2022-4262HIGHbajo ataque24 ene 2024
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corru
76RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2020-0787HIGHbajo ataqueransomware24 ene 2024
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperl
98RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware24 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware24 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22518CRITICALbajo ataqueransomware23 ene 2024
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-7028CRITICALbajo ataque23 ene 2024
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-7028CRITICALbajo ataque23 ene 2024
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RIESGO
abrir ↗
GitHub PoC★ 1
Lỗ hổng ủy quyền không phù hợp trong Trung tâm dữ liệu Confluence và Máy chủ + bugsBonus 🔥
CVE-2023-22518CRITICALbajo ataqueransomware23 ene 2024
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
GitHub PoC★ 2
thanhlam-attt/CVE-2023-7028
CVE-2023-7028CRITICALbajo ataque23 ene 2024
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RIESGO
abrir ↗
GitHub PoC★ 2
POC
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
GitHub PoC★ 14
This repository presents a proof-of-concept of CVE-2023-22527
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
GitHub PoC★ 19
[Confluence] CVE-2023-22527 realworld poc
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
GitHub PoC★ 22
A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered in Confluence Server and Data Center.
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
GitHub PoC★ 9
Atlassian Confluence - Remote Code Execution
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
GitHub PoC★ 10
An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
GitHub PoC★ 7
Workaround for disabling the CLI to mitigate SECURITY-3314/CVE-2024-23897 and SECURITY-3315/CVE-2024-23898
CVE-2024-23897CRITICALbajo ataqueransomware23 ene 2024
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
GitHub PoC★ 4
Atlassian Confluence - Remote Code Execution (CVE-2023-22527)
CVE-2023-22527CRITICALbajo ataqueransomware23 ene 2024
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta
100RIESGO
abrir ↗
← anteriorpágina 503 / 2745siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.