Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.772exploits catalogados

35.760CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8710Nuclei 4319Metasploit 3476✓ solo verificadosrecientes populares riesgo

77.772 exploits

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 4

Greenwolf/CVE-2022-1162

CVE-2022-1162CRITICAL12 abr 2022

A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE

85RIESGO

abrir ↗

GitHub PoC★ 1

Greenwolf/CVE-2022-1175

CVE-2022-1175HIGH12 abr 2022

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor

63RIESGO

abrir ↗

GitHub PoC★ 23

spring4shell | CVE-2022-22965

CVE-2022-22965CRITICALbajo ataque12 abr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC★ 10

PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 1

mumu2020629/-CVE-2022-22954-scanner

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-22954 Açığı test etme

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 12

提供批量扫描URL以及执行命令功能。Workspace ONE Access 模板注入漏洞，可执行任意代码

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC

lucksec/VMware-CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 1

corelight/cve-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 3

TerraMaster TOS Unauthenticated Remote Command Execution(RCE) Vulnerability CVE-2022-24990

CVE-2022-24990CRITICALbajo ataqueransomware12 abr 2022

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

100RIESGO

abrir ↗

Exploit-DB

Telesquare TLR-2855KS6 - Arbitrary File Deletion

CVE-2021-46419—webappshardware11 abr 2022

An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system fil

60RIESGO

abrir ↗

GitHub PoC★ 279

POC for VMWARE CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware11 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 11

CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager

CVE-2022-22954CRITICALbajo ataqueransomware11 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC

Script to check for Spring4Shell vulnerability

CVE-2022-22965CRITICALbajo ataque11 abr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

Exploit-DB

SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference (IDOR)

CVE-2021-46416MEDIUMwebappshardware11 abr 2022

Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups acce

33RIESGO

abrir ↗

Exploit-DB

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI)

CVE-2021-46417—remotelinux11 abr 2022

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privilege

50RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22963CRITICALbajo ataque11 abr 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RIESGO

abrir ↗

GitHub PoC★ 4

Spring4Shell , Spring Framework RCE (CVE-2022-22965) , Burpsuite Plugin

CVE-2022-22965CRITICALbajo ataque11 abr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC★ 4

aniqfakhrul/CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware11 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

Exploit-DB

Telesquare TLR-2855KS6 - Arbitrary File Creation

CVE-2021-46418—webappshardware11 abr 2022

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.

43RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALbajo ataqueransomware11 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC

nanopathi/external_expat_AOSP10_r33_CVE-2022-22822toCVE-2022-22827

CVE-2022-22822CRITICAL11 abr 2022

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

48RIESGO

abrir ↗

GitHub PoC

G01d3nW01f/CVE-2022-22963

CVE-2022-22963CRITICALbajo ataque11 abr 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RIESGO

abrir ↗

GitHub PoC★ 2

burp被动扫描插件，目前只有CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque11 abr 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-9841CRITICALbajo ataque09 abr 2022

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RIESGO

abrir ↗

GitHub PoC

mappl3/CVE-2019-0841

CVE-2019-0841HIGHbajo ataqueransomware09 abr 2022

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

98RIESGO

abrir ↗

GitHub PoC★ 3

phpunit-shell | CVE_2017-9841

CVE-2017-9841CRITICALbajo ataque09 abr 2022

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RIESGO

abrir ↗

GitHub PoC

fransvanbuul/CVE-2022-22965-susceptibility

CVE-2022-22965CRITICALbajo ataque09 abr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

Metasploit600

ManageEngine ADSelfService Plus Custom Script Execution

CVE-2022-28810MEDIUMbajo ataque09 abr 2022

Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.