Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.620exploits catalogados
35.647CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8693Nuclei 4299Metasploit 3474✓ solo verificadosrecientespopularesriesgo
77.533 exploits
GitHub PoC★ 8
Authenticated Remote Command Execution in Gitlab via GitHub import.
CVE-2022-2992CRITICAL14 oct 2022
A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows
85RIESGO
abrir ↗
GitHub PoC★ 1
Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935)
CVE-2019-18935CRITICALbajo ataqueransomware13 oct 2022
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RIESGO
abrir ↗
GitHub PoC★ 16
Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
CVE-2022-40684CRITICALbajo ataqueransomware13 oct 2022
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
GitHub PoC★ 3
CVE-2022-37298 Shinken Monitoring
CVE-2022-37298CRITICAL13 oct 2022
Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler
48RIESGO
abrir ↗
Metasploit600
Apache Commons Text RCE
CVE-2022-42889—13 oct 2022
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RIESGO
abrir ↗
Metasploit600
Zimbra sudo + postfix privilege escalation
CVE-2022-3569HIGH13 oct 2022
Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalat
36RIESGO
abrir ↗
GitHub PoC★ 1
Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935)
CVE-2017-11317CRITICALbajo ataque13 oct 2022
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload
100RIESGO
abrir ↗
GitHub PoC
Arbitrary code execution analysis based on Telerik-UI. This will be done so that the article can be read by others. The document provides an in-depth explanation of the various vectors involved with Telerik-UI for ASP.NET AJAX, as well as POST requests, the architecture of ASP.NET AJAX,
CVE-2017-11317CRITICALbajo ataque13 oct 2022
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload
100RIESGO
abrir ↗
GitHub PoC★ 358
A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
CVE-2022-40684CRITICALbajo ataqueransomware13 oct 2022
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
GitHub PoC★ 87
PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)
CVE-2022-40684CRITICALbajo ataqueransomware13 oct 2022
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
GitHub PoC★ 16
Bash PoC for Fortinet Auth Bypass - CVE-2022-40684
CVE-2022-40684CRITICALbajo ataqueransomware13 oct 2022
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-40684CRITICALbajo ataqueransomware13 oct 2022
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-40684CRITICALbajo ataqueransomware13 oct 2022
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-40684CRITICALbajo ataqueransomware13 oct 2022
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-40684CRITICALbajo ataqueransomware13 oct 2022
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RIESGO
abrir ↗
GitHub PoC★ 2
0x1nsomnia/CVE-2022-36067-vm2-POC-webapp
CVE-2022-36067CRITICAL12 oct 2022
vm2 vulnerable to Sandbox Escape before v3.9.11
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-35914CRITICALbajo ataque12 oct 2022
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-9248CRITICALbajo ataque12 oct 2022
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2022-0847HIGHbajo ataque12 oct 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir ↗
GitHub PoC
r00t4dm/Jenkins-CVE-2016-9299
CVE-2016-9299—12 oct 2022
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a
60RIESGO
abrir ↗
GitHub PoC★ 3
r00t4dm/Jenkins-CVE-2017-1000353
CVE-2017-1000353CRITICALbajo ataque12 oct 2022
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code exe
100RIESGO
abrir ↗
GitHub PoC★ 9
RCE Exploit and Research
CVE-2022-40471CRITICAL12 oct 2022
Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via p
68RIESGO
abrir ↗
GitHub PoC
Remote shell on CVE-2009-4623
CVE-2009-4623—12 oct 2022
Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbi
23RIESGO
abrir ↗
GitHub PoC
r00t4dm/Jenkins-CVE-2015-8103
CVE-2015-8103—12 oct 2022
The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co
60RIESGO
abrir ↗
GitHub PoC★ 1
MariliaMeira/CVE-2019-14287
CVE-2019-14287—12 oct 2022
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se
35RIESGO
abrir ↗
GitHub PoC
edsonjt81/CVE-2022-0847-DirtyPipe-
CVE-2022-0847HIGHbajo ataque12 oct 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir ↗
GitHub PoC★ 1
6E6L6F/CVE-2022-35914
CVE-2022-35914CRITICALbajo ataque12 oct 2022
/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
100RIESGO
abrir ↗
GitHub PoC★ 1
TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)
CVE-2021-4045CRITICAL11 oct 2022
TP-LINK Tapo C200 remote code execution vulnerability
70RIESGO
abrir ↗
GitHub PoC★ 1
Compled version of CVE-2022-0847 aka Dirty Pipe. Just one shot to root them all :D
CVE-2022-0847HIGHbajo ataque11 oct 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-3129CRITICALbajo ataqueransomware11 oct 2022
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RIESGO
abrir ↗
← anteriorpágina 547 / 2585siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.