Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.745exploits catalogados
38.712CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.884Exploit-DB 24.485GitHub PoC 16.068VulnCheck XDB 9333Nuclei 4457Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.745 exploits
GitHub PoC
Ivanti Avalanche v6.4.0.0 RCE POC
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup
78RIESGO
abrir ↗Metasploit600
Junos OS PHPRC Environment Variable Manipulation RCE
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RIESGO
abrir ↗GitHub PoC
asepsaepdin/CVE-2022-21907
HTTP Protocol Stack Remote Code Execution Vulnerability
70RIESGO
abrir ↗Metasploit300
ThinManager Path Traversal (CVE-2023-2915) Arbitrary File Delete
Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
58RIESGO
abrir ↗Metasploit300
ThinManager Path Traversal (CVE-2023-2917) Arbitrary File Upload
Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
65RIESGO
abrir ↗VulnCheck XDB
initial-access
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RIESGO
abrir ↗GitHub PoC★ 5
PoC exploit for file upload vulnerability in BoidCMS version <=2.0.0
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header t
60RIESGO
abrir ↗GitHub PoC
GitHub repository for CVE-2023-3460 POC
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RIESGO
abrir ↗VulnCheck XDB
client-side
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr
83RIESGO
abrir ↗VulnCheck XDB
local
On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay
61RIESGO
abrir ↗GitHub PoC★ 130
mistymntncop/CVE-2023-3079
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr
83RIESGO
abrir ↗GitHub PoC
This is a combination of the zerologon_tester.py code (https://raw.githubusercontent.com/SecuraBV/CVE-2020-1472/master/zerologon_tester.py) and the tool evil-winrm to get a shell.
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir ↗VulnCheck XDB
local
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could
71RIESGO
abrir ↗GitHub PoC★ 8
Local privilege escalation exploit for Android Binder bug CVE-2020-0041 (Pixel 3a)
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could
71RIESGO
abrir ↗Metasploit600
Ivanti Avalanche MDM Buffer Overflow
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup
78RIESGO
abrir ↗VulnCheck XDB
infoleak
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske
48RIESGO
abrir ↗GitHub PoC★ 2
CVE-2022-44268_By_Kyokito
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RIESGO
abrir ↗VulnCheck XDB
local
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗GitHub PoC★ 1
A PoC exploit for CVE-2021-34621 - WordPress Privilege Escalation
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
75RIESGO
abrir ↗VulnCheck XDB
initial-access
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
75RIESGO
abrir ↗GitHub PoC★ 1
CVE-2023-33246 POC
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RIESGO
abrir ↗VulnCheck XDB
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RIESGO
abrir ↗VulnCheck XDB
initial-access
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
100RIESGO
abrir ↗GitHub PoC
yosef0x01/CVE-2023-21752
Windows Backup Service Elevation of Privilege Vulnerability
41RIESGO
abrir ↗GitHub PoC★ 65
mandiant/citrix-ioc-scanner-cve-2023-3519
Unauthenticated remote code execution
100RIESGO
abrir ↗GitHub PoC★ 3
Prestashop fix vulnerability CVE-2023-39526 & CVE-2023-39527
PrestaShopSQL manager vulnerability (potential RCE)
48RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.