Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

82.451exploits catalogados

38.590CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 24.767Exploit-DB 24.485GitHub PoC 15.955VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientes populares riesgo

82.451 exploits

Metasploit600

Apache ActiveMQ Unauthenticated Remote Code Execution

CVE-2023-46604CRITICALbajo ataqueransomware27 oct 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 1

CVE-2023-22515

CVE-2023-22515CRITICALbajo ataqueransomware27 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

GitHub PoC★ 8

MosaedH/CVE-2022-32548-RCE-POC

CVE-2022-32548CRITICAL27 oct 2023

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin

60RIESGO

GitHub PoC★ 28

CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware26 oct 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC★ 13

phankz/Worpress-CVE-2023-5360

CVE-2023-5360—26 oct 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

Metasploit600

F5 BIG-IP TMUI AJP Smuggling RCE

CVE-2023-46747CRITICALbajo ataqueransomware26 oct 2023

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

100RIESGO

Metasploit600

Vinchin Backup and Recovery Command Injection

CVE-2023-45498CRITICAL26 oct 2023

VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability

68RIESGO

Metasploit600

Vinchin Backup and Recovery Command Injection

CVE-2023-45499—26 oct 2023

VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials.

18RIESGO

VulnCheck XDB

initial-access

CVE-2023-23397CRITICALbajo ataque26 oct 2023

Microsoft Outlook Elevation of Privilege Vulnerability

100RIESGO

GitHub PoC

CVE-2023-5360

CVE-2023-5360—26 oct 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

VulnCheck XDB

infoleak

CVE-2021-43798HIGHbajo ataque26 oct 2023

Grafana path traversal

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMbajo ataque26 oct 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-38646—26 oct 2023

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman

60RIESGO

VulnCheck XDB

initial-access

CVE-2023-5360—26 oct 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

GitHub PoC

katseyres2/CVE-2021-43798

CVE-2021-43798HIGHbajo ataque26 oct 2023

Grafana path traversal

100RIESGO

VulnCheck XDB

local

CVE-2023-46604CRITICALbajo ataqueransomware26 oct 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

GitHub PoC

h1n4mx0/Research-CVE-2016-5195

CVE-2016-5195HIGHbajo ataque26 oct 2023

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

GitHub PoC★ 3

PoC and Writeup for CVE-2023-46404.

CVE-2023-46404CRITICAL26 oct 2023

PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping

48RIESGO

GitHub PoC

h1n4mx0z/Research-CVE-2016-5195

CVE-2016-5195HIGHbajo ataque26 oct 2023

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

GitHub PoC★ 4

This script exploits CVE-2023-23397, a Zero-Day vulnerability in Microsoft Outlook, allowing the generation of malicious emails for testing and educational purposes.

CVE-2023-23397CRITICALbajo ataque26 oct 2023

Microsoft Outlook Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

GitHub PoC★ 11

Citrix CVE-2023-4966 from assetnote modified for parallel and file handling

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

VulnCheck XDB

denial-of-service

CVE-2023-44487HIGHbajo ataque25 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

VulnCheck XDB

local

CVE-2023-4911HIGHbajo ataque25 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

98RIESGO

VulnCheck XDB

initial-access

CVE-2023-38646—25 oct 2023

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman

60RIESGO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

GitHub PoC

Bash script to check if kernel is vulnerable

CVE-2022-0847HIGHbajo ataque25 oct 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

GitHub PoC★ 1

IceBreakerCode/CVE-2023-4966

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.