Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC

Local Privilege Escalation is a way to take advantage of flaws in code or service administration that can manage regular or guest users for particular device activities or transfer root user privileges to master or client. User rights admin. The licenses or privileges may be violated by such undesired amendments, as the system may be disrupted by frequent users unless they have shell or root authorization. So, someone, someone, it may become dangerous and be used to obtain access to a higher level.

CVE-2019-13272HIGHbajo ataque20 may 2021

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RIESGO

GitHub PoC

CVE-2019-14287

CVE-2019-14287—20 may 2021

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RIESGO

GitHub PoC★ 1

Docker image that lets me study the exploitation of the VIM exploit

CVE-2019-12735—20 may 2021

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via th

28RIESGO

GitHub PoC★ 5

simple bash script for exploit CVE-2021-31166

CVE-2021-31166CRITICALbajo ataque19 may 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 54

PoC - Exploit Delivery via Steganography and Polyglots, CVE-2014-0282

CVE-2014-0282—17 may 2021

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RIESGO

GitHub PoC★ 3

Different rules to detect if CVE-2021-31166 is being exploited

CVE-2021-31166CRITICALbajo ataque17 may 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 12

HTTP Protocol Stack CVE-2021-31166

CVE-2021-31166CRITICALbajo ataque17 may 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 8

PoC for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. Although it was defined as remote command execution, it can only cause the system to crash.

CVE-2021-31166CRITICALbajo ataque17 may 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames

CVE-2019-14322—17 may 2021

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

50RIESGO

GitHub PoC★ 1

0xm4ud/ProFTPD_CVE-2015-3306

CVE-2015-3306CRITICALbajo ataque16 may 2021

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RIESGO

GitHub PoC★ 60

RCE for Pega Infinity >= 8.2.1, Pega Infinity <= 8.5.2

CVE-2021-27651CRITICAL16 may 2021

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to byp

75RIESGO

GitHub PoC★ 1

PoC of CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2019-14322—16 may 2021

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

50RIESGO

GitHub PoC★ 827

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

CVE-2021-31166CRITICALbajo ataque16 may 2021

HTTP Protocol Stack Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 2

Pega Infinity Password Reset

CVE-2021-27651CRITICAL16 may 2021

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to byp

75RIESGO

GitHub PoC★ 4

Exploit CVE-2017-7494 for Net Security course final Assignment. This would reveal the vulnerability of services that run in administrative priority on Linux.

CVE-2017-7494CRITICALbajo ataqueransomware15 may 2021

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

GitHub PoC★ 1

This is modified code of 46635 exploit from python2 to python3.

CVE-2019-9053—14 may 2021

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RIESGO

GitHub PoC★ 258

Exploit to SYSTEM for CVE-2021-21551

CVE-2021-21551HIGHbajo ataque13 may 2021

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

100RIESGO

GitHub PoC★ 5

CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp

CVE-2020-9496—13 may 2021

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RIESGO

GitHub PoC★ 4

weblogic CVE-2021-2109批量验证poc

CVE-2021-2109HIGH13 may 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

63RIESGO

GitHub PoC★ 12

exiftool arbitrary code execution vulnerability

CVE-2021-22204MEDIUMbajo ataque12 may 2021

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RIESGO

GitHub PoC

fu2x2000/CVE-2017-17058-woo_exploit

CVE-2017-17058HIGH11 may 2021

The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooco

46RIESGO

GitHub PoC★ 98

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

CVE-2021-22204MEDIUMbajo ataque11 may 2021

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RIESGO

GitHub PoC★ 1

0xm4ud/Cacti-CVE-2020-8813

CVE-2020-8813—11 may 2021

graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a

60RIESGO

GitHub PoC★ 3

POC Exploit written in Ruby

CVE-2019-5420—11 may 2021

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RIESGO

GitHub PoC★ 3

Exploit for Node-jose < 0.11.0 written in Ruby

CVE-2018-0114—11 may 2021

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker

35RIESGO

GitHub PoC★ 3

Check YouTube - https://youtu.be/O0ZnLXRY5Wo

CVE-2020-14882CRITICALbajo ataque10 may 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RIESGO

GitHub PoC★ 5

CVE-2017-7494 python exploit

CVE-2017-7494CRITICALbajo ataqueransomware09 may 2021

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

GitHub PoC

CVE-2020-9496 manual exploit

CVE-2020-9496—07 may 2021

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RIESGO

GitHub PoC★ 4

CVE-2019-2215

CVE-2019-2215HIGHbajo ataque07 may 2021

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

GitHub PoC

exploit

CVE-2019-18634—05 may 2021

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.