Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.745exploits catalogados
38.712CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.884Exploit-DB 24.485GitHub PoC 16.068VulnCheck XDB 9333Nuclei 4457Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.745 exploits
VulnCheck XDB
initial-access
Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
85RIESGO
abrir ↗GitHub PoC★ 7
A PoC exploit for CVE-2021-42013 - Apache 2.4.49 & 2.4.50 Remote Code Execution
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RIESGO
abrir ↗VulnCheck XDB
initial-access
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RIESGO
abrir ↗VulnCheck XDB
client-side
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir ↗GitHub PoC★ 785
CVE-2023-38831 winrar exploit generator
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir ↗VulnCheck XDB
local
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RIESGO
abrir ↗VulnCheck XDB
initial-access
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RIESGO
abrir ↗GitHub PoC★ 115
watchtowrlabs/juniper-rce_cve-2023-36844
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
100RIESGO
abrir ↗VulnCheck XDB
initial-access
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
100RIESGO
abrir ↗GitHub PoC
ptkhai15/OverlayFS---CVE-2021-3493
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RIESGO
abrir ↗VulnCheck XDB
initial-access
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
85RIESGO
abrir ↗GitHub PoC
krmxd/CVE-2023-2868
Remote Code injection in Barracuda Email Security Gateway
100RIESGO
abrir ↗VulnCheck XDB
initial-access
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RIESGO
abrir ↗GitHub PoC★ 12
PHP CGI Argument Injection.
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RIESGO
abrir ↗GitHub PoC★ 7
CVE-2023-38035 Recon oriented exploit, extract company name contact information
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RIESGO
abrir ↗Metasploit600
LG Simple Editor Remote Code Execution
LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability
65RIESGO
abrir ↗VulnCheck XDB
infoleak
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2
61RIESGO
abrir ↗VulnCheck XDB
initial-access
A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary comma
60RIESGO
abrir ↗GitHub PoC★ 205
Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RIESGO
abrir ↗VulnCheck XDB
initial-access
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RIESGO
abrir ↗VulnCheck XDB
local
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RIESGO
abrir ↗VulnCheck XDB
client-side
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir ↗GitHub PoC★ 91
lazy way to create CVE-2023-38831 winrar file for testing
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir ↗GitHub PoC★ 243
Wh04m1001/CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RIESGO
abrir ↗VulnCheck XDB
local
Windows Error Reporting Service Elevation of Privilege Vulnerability
98RIESGO
abrir ↗VulnCheck XDB
initial-access
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RIESGO
abrir ↗GitHub PoC
Lab environment to test CVE-2023-25725
HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situatio
48RIESGO
abrir ↗GitHub PoC★ 40
Ivanti Sentry CVE-2023-38035
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.