Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.724exploits catalogados

35.724CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8703Nuclei 4314Metasploit 3474✓ solo verificadosrecientes populares riesgo

77.724 exploits

VulnCheck XDB

local

CVE-2022-0847HIGHbajo ataque17 may 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

Exploit-DB

SDT-CW3B1 1.1.0 - OS Command Injection

CVE-2021-46422—remotehardware17 may 2022

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RIESGO

abrir ↗

Exploit-DB

SolarView Compact 6.0 - OS Command Injection

CVE-2022-29303CRITICALbajo ataqueremotehardware17 may 2022

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

100RIESGO

abrir ↗

Exploit-DB

Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS)

CVE-2022-29727—webappsmultiple17 may 2022

Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup param

23RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust

CVE-2022-1388CRITICALbajo ataqueransomware17 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 2

This repository is developed to analysis and understand DirtyPipe exploit CVE-2022-0847

CVE-2022-0847HIGHbajo ataque17 may 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 1

Multithread Golang application

CVE-2022-21907CRITICAL16 may 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC

Wrin9/CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware16 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-30525 POC exploit

CVE-2022-30525CRITICALbajo ataque16 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 60

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）注入哥斯拉内存马

CVE-2022-22947CRITICALbajo ataque16 may 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

Persistent XSS on 'last_known_version' field (My Settings)

CVE-2022-28598—16 may 2022

Frappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly neutralize user-contro

23RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2022-30525（Zxyel 防火墙命令注入）的概念证明漏洞利用

CVE-2022-30525CRITICALbajo ataque16 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-30525CRITICALbajo ataque16 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2022-22947CRITICALbajo ataque16 may 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-21972CRITICALbajo ataqueransomware16 may 2022

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RIESGO

abrir ↗

GitHub PoC

user16-et/cve-2021-21972_PoC

CVE-2021-21972CRITICALbajo ataqueransomware16 may 2022

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RIESGO

abrir ↗

Metasploit600

Gitea Git Fetch Remote Code Execution

CVE-2022-30781—16 may 2022

Gitea before 1.16.7 does not escape git fetch remote.

60RIESGO

abrir ↗

GitHub PoC★ 7

Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

CVE-2008-0166—15 may 2022

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware15 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware15 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-29464CRITICALbajo ataqueransomware15 may 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 1

Improved POC for CVE-2022-1388 that affects multiple F5 products.

CVE-2022-1388CRITICALbajo ataqueransomware15 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC

Zyxel Firewall Remote Command Injection Vulnerability (CVE-2022-30525) Batch Detection Script

CVE-2022-30525CRITICALbajo ataque15 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC★ 14

An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell

CVE-2022-1388CRITICALbajo ataqueransomware15 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 1

MyBB 1.8.29 - Remote Code Execution

CVE-2022-24734HIGH15 may 2022

Remote code execution in mybb

78RIESGO

abrir ↗

GitHub PoC★ 11

A bots loader for CVE-2022-29464 with multithreading

CVE-2022-29464CRITICALbajo ataqueransomware15 may 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 41

The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services (AD CS) server role installed.

CVE-2022-26923HIGHbajo ataque14 may 2022

Active Directory Domain Services Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC

Technical Analysis of the SMB vulnerability (CVE-2017-0143) & its impact on the vulnerable system

CVE-2017-0143HIGHbajo ataqueransomware14 may 2022

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware13 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-30525CRITICALbajo ataque13 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.