Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

82.419exploits catalogados

38.564CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 24.745Exploit-DB 24.485GitHub PoC 15.945VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientes populares riesgo

82.419 exploits

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALbajo ataqueransomware20 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC

CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware20 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 1

PY

CVE-2023-46604CRITICALbajo ataqueransomware20 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-41773HIGHbajo ataqueransomware20 nov 2023

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

VulnCheck XDB

infoleak

CVE-2017-7921CRITICALbajo ataque20 nov 2023

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

GitHub PoC★ 2

CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 exploit

CVE-2017-8917—20 nov 2023

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci

60RIESGO

GitHub PoC

Scripts to get infos

CVE-2023-4966CRITICALbajo ataqueransomware20 nov 2023

Unauthenticated sensitive information disclosure

100RIESGO

GitHub PoC

A POC of a type confusion bug in chakracore framework that leads to code execute.

CVE-2019-0567—19 nov 2023

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RIESGO

GitHub PoC

rhymsc/CVE-2022-44877-RCE

CVE-2022-44877CRITICALbajo ataque18 nov 2023

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execut

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALbajo ataqueransomware18 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-44877CRITICALbajo ataque18 nov 2023

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execut

100RIESGO

GitHub PoC

wshinkle/CVE-2023-2982

CVE-2023-2982CRITICAL18 nov 2023

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

75RIESGO

GitHub PoC★ 3

NKeshawarz/CVE-2023-46604-RCE

CVE-2023-46604CRITICALbajo ataqueransomware18 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-2982CRITICAL18 nov 2023

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

75RIESGO

GitHub PoC★ 13

Quick test for CVE-2023-26025 behaviours

CVE-2023-36025HIGHbajo ataque17 nov 2023

Windows SmartScreen Security Feature Bypass Vulnerability

93RIESGO

VulnCheck XDB

initial-access

CVE-2023-47246CRITICALbajo ataqueransomware17 nov 2023

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f

100RIESGO

GitHub PoC★ 52

exploit for cve-2023-47246 SysAid RCE (shell upload)

CVE-2023-47246CRITICALbajo ataqueransomware17 nov 2023

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f

100RIESGO

GitHub PoC

SynixCyberCrimeMY CVE Exploiter By SamuraiMelayu1337 & ?/h4zzzzzz.scc

CVE-2022-29464CRITICALbajo ataqueransomware16 nov 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

GitHub PoC★ 64

CVE-2023-20198 Exploit PoC

CVE-2023-20198CRITICALbajo ataque16 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-29464CRITICALbajo ataqueransomware16 nov 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-20198CRITICALbajo ataque16 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

GitHub PoC★ 2

CVE-2023-46604环境复现包

CVE-2023-46604CRITICALbajo ataqueransomware16 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC

POC repo for CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware15 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALbajo ataqueransomware15 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC

Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)

CVE-2023-36845CRITICALbajo ataque15 nov 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

VulnCheck XDB

client-side

CVE-2023-38831HIGHbajo ataqueransomware15 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

GitHub PoC★ 4

WinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572漏洞复现

CVE-2023-38831HIGHbajo ataqueransomware15 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

Metasploit600

Ray cpu_profile command injection

CVE-2023-6019CRITICAL15 nov 2023

Ray Command Injection in cpu_profile Parameter

85RIESGO

Metasploit300

Ray static arbitrary file read

CVE-2023-6020HIGH15 nov 2023

Ray Static File Local File Include

41RIESGO

Metasploit600

Ray Agent Job RCE

CVE-2023-48022CRITICAL15 nov 2023

Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the ve

85RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.