Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

82.451exploits catalogados
38.590CVEs con explotación pública
24.695probados en laboratorio
82.451 exploits
VulnCheck XDB
initial-access
CVE-2021-29441HIGH12 oct 2023
Authentication bypass
78RIESGO
abrir ↗
GitHub PoC★ 63
xortigate-cve-2023-27997
CVE-2023-27997CRITICALbajo ataqueransomware12 oct 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RIESGO
abrir ↗
GitHub PoC
CVE-2023-44487
CVE-2023-44487HIGHbajo ataque12 oct 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RIESGO
abrir ↗
GitHub PoC
Test Script for CVE-2023-44487
CVE-2023-44487HIGHbajo ataque12 oct 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RIESGO
abrir ↗
GitHub PoC★ 1
ruycr4ft/CVE-2023-38831
CVE-2023-38831HIGHbajo ataqueransomware12 oct 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-38646—12 oct 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RIESGO
abrir ↗
GitHub PoC★ 9
delsploit/CVE-2023-27997
CVE-2023-27997CRITICALbajo ataqueransomware12 oct 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-38646—12 oct 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-27997CRITICALbajo ataqueransomware12 oct 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALbajo ataqueransomware12 oct 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHbajo ataque12 oct 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHbajo ataque12 oct 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-27997CRITICALbajo ataqueransomware12 oct 2023
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi
100RIESGO
abrir ↗
GitHub PoC★ 25
Confluence Unauthorized Administrator User Addition Exploitation Script
CVE-2023-22515CRITICALbajo ataqueransomware12 oct 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2023-38831HIGHbajo ataqueransomware12 oct 2023
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir ↗
GitHub PoC★ 5
CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server
CVE-2023-22515CRITICALbajo ataqueransomware11 oct 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALbajo ataqueransomware11 oct 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-22515CRITICALbajo ataqueransomware11 oct 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-38646—11 oct 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RIESGO
abrir ↗
GitHub PoC★ 110
Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具
CVE-2023-22515CRITICALbajo ataqueransomware11 oct 2023
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHbajo ataque11 oct 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2023-4911HIGHbajo ataque11 oct 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
98RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-2215MEDIUM11 oct 2023
Campcodes Coffee Shop POS System manage_user.php sql injection
33RIESGO
abrir ↗
GitHub PoC★ 19
CVE-2023-4911
CVE-2023-4911HIGHbajo ataque11 oct 2023
Glibc: buffer overflow in ld.so leading to privilege escalation
98RIESGO
abrir ↗
GitHub PoC
Security Vulnerability - Kardex Mlog MCC
CVE-2023-22855CRITICAL11 oct 2023
Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 808
53RIESGO
abrir ↗
GitHub PoC★ 56
Proof of concept for DoS exploit
CVE-2023-44487HIGHbajo ataque11 oct 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2023-38646—11 oct 2023
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RIESGO
abrir ↗
GitHub PoC★ 56
Proof of concept for DoS exploit
CVE-2023-44487HIGHbajo ataque11 oct 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RIESGO
abrir ↗
GitHub PoC
Openfire未授权到RCE(CVE-2023-32315)复现
CVE-2023-32315HIGHbajo ataque10 oct 2023
Openfire administration console authentication bypass
100RIESGO
abrir ↗
GitHub PoC★ 247
Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487
CVE-2023-44487HIGHbajo ataque10 oct 2023
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RIESGO
abrir ↗
← anteriorpágina 536 / 2749siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.