Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 26

cve-2021-22986 f5 rce 漏洞批量检测 poc

CVE-2021-22986CRITICALbajo ataqueransomware19 mar 2021

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RIESGO

abrir ↗

GitHub PoC★ 29

Whatsapp remote code execution CVE-2019-11932 https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/

CVE-2019-11932—19 mar 2021

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

35RIESGO

abrir ↗

GitHub PoC★ 4

Exploit generator for sudo CVE-2021-3156

CVE-2021-3156HIGHbajo ataque19 mar 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 4

Jquery File Tree 1.6.6 Path Traversal exploit (CVE-2017-1000170)

CVE-2017-1000170—19 mar 2021

jqueryFileTree 2.1.5 and older Directory Traversal

50RIESGO

abrir ↗

GitHub PoC

antichown/Scan-Vuln-CVE-2021-26855

CVE-2021-26855CRITICALbajo ataqueransomware18 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 9

CutePHP Cute News 2.1.2 RCE PoC

CVE-2019-11447—18 mar 2021

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RIESGO

abrir ↗

GitHub PoC★ 1

PoC Python script as an exercice from tryhackme.

CVE-2012-2982—18 mar 2021

file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid

50RIESGO

abrir ↗

GitHub PoC

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability).

CVE-2019-20361HIGH18 mar 2021

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to b

78RIESGO

abrir ↗

GitHub PoC★ 123

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

CVE-2021-26855CRITICALbajo ataqueransomware17 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2021-26855 proxyLogon metasploit exploit script

CVE-2021-26855CRITICALbajo ataqueransomware17 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE (Authenticated)

CVE-2019-11447—17 mar 2021

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce

35RIESGO

abrir ↗

GitHub PoC★ 51

This is a Poc for BIGIP iControl unauth RCE

CVE-2021-22986CRITICALbajo ataqueransomware17 mar 2021

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RIESGO

abrir ↗

GitHub PoC★ 33

ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.

CVE-2021-26855CRITICALbajo ataqueransomware16 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange

CVE-2021-26855CRITICALbajo ataqueransomware16 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

automate me!

CVE-2021-21973MEDIUMbajo ataque16 mar 2021

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of UR

100RIESGO

abrir ↗

GitHub PoC★ 28

CVE-2021-26855 & CVE-2021-27065

CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 810

Sudo Baron Samedit Exploit

CVE-2021-3156HIGHbajo ataque15 mar 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 4

patched to work

CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 6

Mr-xn/CVE-2021-26855-d

CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 28

CVE-2021-26855: PoC (Not a HoneyPoC for once!)

CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 10

RCE exploit for ProxyLogon vulnerability in Microsoft Exchange

CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

Exploit Samba

CVE-2007-2447—14 mar 2021

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC★ 22

RCE exploit for Microsoft Exchange Server (CVE-2021-26855).

CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

vonderchild/CVE-2016-3088

CVE-2016-3088CRITICALbajo ataque12 mar 2021

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RIESGO

abrir ↗

GitHub PoC

Will write a python script for exploiting this vulnerability

CVE-2020-25213CRITICALbajo ataque12 mar 2021

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 3

Scanner and PoC for CVE-2021-26855

CVE-2021-26855CRITICALbajo ataqueransomware12 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 12

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.

CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065

CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 5

Apache ActiveMQ Remote Code Execution Exploit

CVE-2016-3088CRITICALbajo ataque11 mar 2021

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RIESGO

abrir ↗

GitHub PoC★ 1077

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

CVE-2020-14883HIGHbajo ataque11 mar 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.