Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 2

👻CVE-2017-16995

CVE-2017-16995—28 ene 2021

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2021-3156

CVE-2021-3156HIGHbajo ataque28 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 5

cve-2021-3156;sudo堆溢出漏洞；漏洞检测

CVE-2021-3156HIGHbajo ataque28 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 4

baka9moe/CVE-2021-3156-Exp

CVE-2021-3156HIGHbajo ataque28 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 18

1day research effort

CVE-2021-3156HIGHbajo ataque28 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC

CVE-2021-3156

CVE-2021-3156HIGHbajo ataque27 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 69

Exploit for CVE-2021-3129

CVE-2021-3129CRITICALbajo ataqueransomware27 ene 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 18

crisprss/Laravel_CVE-2021-3129_EXP

CVE-2021-3129CRITICALbajo ataqueransomware27 ene 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 3

This simple bash script will patch the recently discovered sudo heap overflow vulnerability.

CVE-2021-3156HIGHbajo ataque27 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 79

WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar

CVE-2020-14756CRITICAL27 ene 2021

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versio

70RIESGO

abrir ↗

GitHub PoC★ 1

unauth401/CVE-2021-3156

CVE-2021-3156HIGHbajo ataque27 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 112

CVE-2021-3156

CVE-2021-3156HIGHbajo ataque27 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC

nexcess/sudo_cve-2021-3156

CVE-2021-3156HIGHbajo ataque27 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 35

mr-r3b00t/CVE-2021-3156

CVE-2021-3156HIGHbajo ataque26 ene 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2021-3441 CVE Check is a python script to search targets for indicators of compromise to CVE-2021-3441

CVE-2021-3441—26 ene 2021

A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross

23RIESGO

abrir ↗

GitHub PoC★ 5

用于对WebLogic(10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0)进行验证及利用

CVE-2020-14883HIGHbajo ataque25 ene 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RIESGO

abrir ↗

GitHub PoC★ 79

SecPros-Team/laravel-CVE-2021-3129-EXP

CVE-2021-3129CRITICALbajo ataqueransomware25 ene 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 6

SignHere is implementation of CVE-2017-11882. SignHere is builder of malicious rtf document and VBScript payloads.

CVE-2017-11882HIGHbajo ataqueransomware25 ene 2021

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

abrir ↗

GitHub PoC

Quick and dirty bruteforcer for CVE-2018-7669 (Directory Traversal Vulnerability in Sitecore)

CVE-2018-7669—25 ene 2021

An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application

28RIESGO

abrir ↗

GitHub PoC

killmonday/CVE-2020-17530-s2-061

CVE-2020-17530CRITICALbajo ataque24 ene 2021

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected

100RIESGO

abrir ↗

GitHub PoC★ 6

CVE-2020-8597 in RM2100

CVE-2020-8597CRITICAL24 ene 2021

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

53RIESGO

abrir ↗

GitHub PoC★ 1

findcool/cve-2021-1647

CVE-2021-1647HIGHbajo ataque23 ene 2021

Microsoft Defender Remote Code Execution Vulnerability

83RIESGO

abrir ↗

GitHub PoC★ 134

Laravel debug rce

CVE-2021-3129CRITICALbajo ataqueransomware22 ene 2021

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 31

CVE-2021-2109 && Weblogic Server RCE via JNDI

CVE-2021-2109HIGH22 ene 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

63RIESGO

abrir ↗

GitHub PoC★ 9

rabbitsafe/CVE-2021-2109

CVE-2021-2109HIGH22 ene 2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

63RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2020-17456 & Seowon SLC 130 Router RCE

CVE-2020-17456—21 ene 2021

SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi pa

60RIESGO

abrir ↗

GitHub PoC

CVE-2019-17137 POC

CVE-2019-17137CRITICAL20 ene 2021

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC120

48RIESGO

abrir ↗

GitHub PoC

Eremiel/CVE-2019-5420

CVE-2019-5420—20 ene 2021

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RIESGO

abrir ↗

GitHub PoC★ 18

Zerologon Check and Exploit - Discovered by Tom Tervoort of Secura and expanded on @Dirkjanm's cve-2020-1472 coded example. This tool will check, exploit and restore password to original state

CVE-2020-1472MEDIUMbajo ataqueransomware20 ene 2021

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2020-17519; Apache Flink 任意文件读取; 批量检测

CVE-2020-17519CRITICALbajo ataque18 ene 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.