Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.724exploits catalogados
35.724CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8703Nuclei 4314Metasploit 3474✓ solo verificadosrecientespopularesriesgo
77.620 exploits
GitHub PoC★ 1
libSSH-Authentication-Bypass
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RIESGO
abrir ↗GitHub PoC
Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which i
45RIESGO
abrir ↗Metasploit600
Softing Secure Integration Server v1.22 Remote Code Execution
Softing Secure Integration Server Relative Path Traversal
41RIESGO
abrir ↗Metasploit600
Softing Secure Integration Server v1.22 Remote Code Execution
Softing Secure Integration Server Uncontrolled Search Path Element
41RIESGO
abrir ↗GitHub PoC
weblogic-cve-2018-2628-exp
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RIESGO
abrir ↗VulnCheck XDB
initial-access
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RIESGO
abrir ↗GitHub PoC★ 14
QNAP N-Day (Probably not CVE-2020-2509)
Command Injection Vulnerability in QTS and QuTS hero
90RIESGO
abrir ↗GitHub PoC★ 408
警惕 一种针对红队的新型溯源手段!
Remote Procedure Call Runtime Remote Code Execution Vulnerability
70RIESGO
abrir ↗GitHub PoC
A demo for cve-2019-12735
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via th
28RIESGO
abrir ↗GitHub PoC
Module for PrestaShop 1.6.1.X/1.7.X to fix CVE-2022-31181 / CVE-2022-36408 vulnerability (Chain SQL Injection)
Remote code execution in prestashop
63RIESGO
abrir ↗GitHub PoC★ 1
WebMin Versions <= 1.920 [CVE-2019-15107] RCE PoC
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RIESGO
abrir ↗VulnCheck XDB
initial-access
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RIESGO
abrir ↗GitHub PoC★ 7
Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o
100RIESGO
abrir ↗Metasploit600
Webmin Package Updates RCE
software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.
60RIESGO
abrir ↗VulnCheck XDB
initial-access
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti
60RIESGO
abrir ↗GitHub PoC★ 42
Major Security Vulnerability on PrestaShop Websites - CVE-2022-31101
SQL Injection in prestashop/blockwishlist
61RIESGO
abrir ↗GitHub PoC★ 1
CVE-2014-7169 Shell Shock
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RIESGO
abrir ↗VulnCheck XDB
local
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RIESGO
abrir ↗GitHub PoC★ 7
远程攻击者在Confluence未经身份验证的情况下，可构造OGNL表达式进行注入，实现在Confluence Server或Data Center上执行任意代码,在现有脚本上修改了poc，方便getshell。
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RIESGO
abrir ↗GitHub PoC
Mitigation/fix of CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RIESGO
abrir ↗GitHub PoC★ 8
CVE-2022-23131漏洞批量检测与利用脚本
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
100RIESGO
abrir ↗GitHub PoC★ 31
Atlassian Questions Hardcoded Password (CVE-2022-26138)
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th
100RIESGO
abrir ↗Exploit-DB
CodoForum v5.1 - Remote Code Execution (RCE)
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin
50RIESGO
abrir ↗Exploit-DB
OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE)
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.
28RIESGO
abrir ↗Exploit-DB
Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)
Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function.
35RIESGO
abrir ↗VulnCheck XDB
initial-access
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in th
100RIESGO
abrir ↗GitHub PoC★ 3
Detection and Remediation of the Follina MSDT Vulnerability (CVE-2022-30190)
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RIESGO
abrir ↗Exploit-DB
IOTransfer 4.0 - Remote Code Execution (RCE)
In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary
35RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.