Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC

An exploit to get root in vsftpd 2.3.4 (CVE-2011-2523) written in python

CVE-2011-2523—09 abr 2021

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2020-35729

CVE-2020-35729—09 abr 2021

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.

60RIESGO

abrir ↗

GitHub PoC

Buffer Overflow in Seattle Lab Mail (SLmail) 5.5 - POP3

CVE-2003-0264—08 abr 2021

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg

60RIESGO

abrir ↗

GitHub PoC

CVE-2016-2098 - POC of RCE Ruby on Rails: Improper Input Validation (CVE-2016-2098) in bash. Remote attackers can execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

CVE-2016-2098—07 abr 2021

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to e

60RIESGO

abrir ↗

GitHub PoC★ 1

Exploit Code for CVE-2020-1472 aka Zerologon

CVE-2020-1472MEDIUMbajo ataqueransomware06 abr 2021

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 6

[CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE)

CVE-2021-21972CRITICALbajo ataqueransomware06 abr 2021

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RIESGO

abrir ↗

GitHub PoC

pwn3z/CVE-2019-19781-Citrix

CVE-2019-19781CRITICALbajo ataqueransomware06 abr 2021

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 37

vRealize RCE + Privesc (CVE-2021-21975, CVE-2021-21983, CVE-0DAY-?????)

CVE-2021-21975CRITICALbajo ataqueransomware06 abr 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RIESGO

abrir ↗

GitHub PoC

Exploit for CVE-2012-2982

CVE-2012-2982—06 abr 2021

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RIESGO

abrir ↗

GitHub PoC

delina1/CVE-2018-8174_EXP

CVE-2018-8174HIGHbajo ataqueransomware05 abr 2021

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RIESGO

abrir ↗

GitHub PoC★ 3

Exploiting CVE-2014-7205 by injecting arbitrary JavaScript resulting in Remote Code Execution.

CVE-2014-7205—05 abr 2021

Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for t

60RIESGO

abrir ↗

GitHub PoC

delina1/CVE-2018-8174

CVE-2018-8174HIGHbajo ataqueransomware05 abr 2021

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RIESGO

abrir ↗

GitHub PoC

capturingcats/CVE-2021-3156

CVE-2021-3156HIGHbajo ataque05 abr 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2017-9805-Exploit

CVE-2017-9805HIGHbajo ataque04 abr 2021

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2017-9805-Exploit

CVE-2017-9805HIGHbajo ataque04 abr 2021

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a

100RIESGO

abrir ↗

GitHub PoC

piruprohacking/CVE-2020-25213

CVE-2020-25213CRITICALbajo ataque03 abr 2021

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra

100RIESGO

abrir ↗

GitHub PoC

CVE-2019-0708 Exploit

CVE-2019-0708CRITICALbajo ataqueransomware03 abr 2021

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

abrir ↗

GitHub PoC★ 4

[CVE-2021-21975] VMware vRealize Operations Manager API Server Side Request Forgery (SSRF)

CVE-2021-21975CRITICALbajo ataqueransomware02 abr 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RIESGO

abrir ↗

GitHub PoC★ 3

linuxdy/CVE-2021-1732_exp

CVE-2021-1732HIGHbajo ataqueransomware02 abr 2021

Windows Win32k Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC

shreesh1/CVE-2014-0226-poc

CVE-2014-0226—02 abr 2021

Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denia

45RIESGO

abrir ↗

GitHub PoC★ 1

Vulnmachines/apache-ofbiz-CVE-2020-9496

CVE-2020-9496—01 abr 2021

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RIESGO

abrir ↗

GitHub PoC★ 27

Nmap script to check vulnerability CVE-2021-21975

CVE-2021-21975CRITICALbajo ataqueransomware01 abr 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RIESGO

abrir ↗

GitHub PoC

Pommaq/CVE-1999-0016-POC

CVE-1999-0016—01 abr 2021

Land IP denial of service.

45RIESGO

abrir ↗

GitHub PoC★ 12

VMWare vRealize SSRF-CVE-2021-21975

CVE-2021-21975CRITICALbajo ataqueransomware31 mar 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RIESGO

abrir ↗

GitHub PoC★ 13

CVE-2021-21975 vRealize Operations Manager SSRF

CVE-2021-21975CRITICALbajo ataqueransomware31 mar 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RIESGO

abrir ↗

GitHub PoC★ 2

dorkerdevil/CVE-2021-21975

CVE-2021-21975CRITICALbajo ataqueransomware31 mar 2021

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RIESGO

abrir ↗

GitHub PoC★ 9

hev0x/CVE-2021-26828_ScadaBR_RCE

CVE-2021-26828HIGHbajo ataque31 mar 2021

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and exe

83RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2020-14882部署冰蝎内存马

CVE-2020-14882CRITICALbajo ataque31 mar 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RIESGO

abrir ↗

GitHub PoC★ 4

D-Link DCS系列账号密码信息泄露漏洞，通过脚本获取账号密码，可批量。

CVE-2020-25078HIGHbajo ataque30 mar 2021

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticate

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2018-9995 هک دوربین مداربسته با آسیب پذیری

CVE-2018-9995—30 mar 2021

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.