Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.106exploits catalogados

40.548CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.066VulnCheck XDB 10.121Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.072 exploits

GitHub PoC★ 4

A C# module to detect if a Jenkins server is vulnerable to the RCE vulnerability found in CVE-2019-1003000 (chained with CVE-2018-1000861 for pre-auth RCE)

CVE-2019-1003000—24 abr 2019

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/

60RIESGO

GitHub PoC★ 1

rakesh143/CVE-2019-0808

CVE-2019-0808HIGHbajo ataque21 abr 2019

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

98RIESGO

GitHub PoC

cve-2017-17485 PoC

CVE-2017-17485CRITICAL21 abr 2019

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because o

60RIESGO

GitHub PoC

TateYdq/CVE-2018-9995-ModifiedByGwolfs

CVE-2018-9995—20 abr 2019

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RIESGO

GitHub PoC★ 15

Python script to exploit confluence path traversal vulnerability cve-2019-3398

CVE-2019-3398HIGHbajo ataque20 abr 2019

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote at

100RIESGO

GitHub PoC★ 31

CVE-2019-3799 - Spring Cloud Config Server: Directory Traversal < 2.1.2, 2.0.4, 1.4.6

CVE-2019-3799—17 abr 2019

Directory Traversal with spring-cloud-config-server

60RIESGO

GitHub PoC

A python script that tests for an exploitable instance of CVE-2018-1235.

CVE-2018-1235—17 abr 2019

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command inje

35RIESGO

GitHub PoC★ 82

Apache Tomcat Remote Code Execution on Windows - CGI-BIN

CVE-2019-0232—16 abr 2019

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0

60RIESGO

GitHub PoC★ 190

Apache Tomcat Remote Code Execution on Windows

CVE-2019-0232—15 abr 2019

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0

60RIESGO

GitHub PoC★ 3

CVE-2018-16858 exploit implementation

CVE-2018-16858HIGH14 abr 2019

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could

68RIESGO

GitHub PoC★ 1

🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.

CVE-2025-49844CRITICAL13 abr 2019

Redis Lua Use-After-Free may lead to remote code execution

85RIESGO

GitHub PoC★ 1

Exploit for the CVE-2019-5736 runc vulnerability

CVE-2019-5736—13 abr 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RIESGO

GitHub PoC★ 57

jenkins CVE-2017-1000353 POC

CVE-2017-1000353CRITICALbajo ataque12 abr 2019

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code exe

100RIESGO

GitHub PoC★ 50

rogue-kdc/CVE-2019-1253

CVE-2019-1253HIGHbajo ataqueransomware10 abr 2019

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e

76RIESGO

GitHub PoC

s1xg0d/CVE-2019-3396

CVE-2019-3396CRITICALbajo ataqueransomware10 abr 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

GitHub PoC★ 144

Confluence 未授权 RCE (CVE-2019-3396) 漏洞

CVE-2019-3396CRITICALbajo ataqueransomware10 abr 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

GitHub PoC★ 174

CVE-2019-3396 confluence SSTI RCE

CVE-2019-3396CRITICALbajo ataqueransomware10 abr 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

GitHub PoC★ 39

Confluence Widget Connector RCE

CVE-2019-3396CRITICALbajo ataqueransomware10 abr 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

GitHub PoC

Confluence Widget Connector RCE - ptquan

CVE-2019-3396CRITICALbajo ataqueransomware10 abr 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

GitHub PoC★ 2

likekabin/CVE-2019-0841

CVE-2019-0841HIGHbajo ataqueransomware10 abr 2019

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RIESGO

GitHub PoC★ 22

Confluence Widget Connector path traversal (CVE-2019-3396)

CVE-2019-3396CRITICALbajo ataqueransomware09 abr 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

GitHub PoC

Confluence Widget Connector RCE

CVE-2019-3396CRITICALbajo ataqueransomware09 abr 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

GitHub PoC

xiaoshuier/CVE-2019-3396

CVE-2019-3396CRITICALbajo ataqueransomware09 abr 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

GitHub PoC★ 240

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

CVE-2019-0841HIGHbajo ataqueransomware05 abr 2019

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RIESGO

GitHub PoC★ 4

ManageEngine Service Desk Plus 10.0 Privilaged account Hijacking

CVE-2019-10008—04 abr 2019

Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session

28RIESGO

GitHub PoC★ 1

likekabin/CVE-2019-0604_sharepoint_CVE

CVE-2019-0604CRITICALbajo ataqueransomware04 abr 2019

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

100RIESGO

GitHub PoC

Example and demo setup for Heartbleed vulnerability (CVE-2014-0160). This should be used for testing purposes only!💔

CVE-2014-0160HIGHbajo ataque03 abr 2019

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

GitHub PoC

artofscripting-zz/cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS

CVE-2014-0160HIGHbajo ataque02 abr 2019

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

GitHub PoC★ 2

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Print Archive System v2015 release 2.6

CVE-2019-10685—02 abr 2019

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0.

23RIESGO

GitHub PoC★ 4

Just a PoC tool to extract password using CVE-2019-1653.

CVE-2019-1653HIGHbajo ataque01 abr 2019

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.