Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.772exploits catalogados
35.760CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8710Nuclei 4319Metasploit 3476✓ solo verificadosrecientespopularesriesgo
77.772 exploits
Metasploit400
VMware Workspace ONE Access CVE-2022-22960
CVE-2022-22960HIGHbajo ataque06 abr 2022
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t
98RIESGO
abrir ↗
Metasploit600
VMware Workspace ONE Access VMSA-2022-0011 exploit chain
CVE-2022-22956—06 abr 2022
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth
30RIESGO
abrir ↗
GitHub PoC★ 2
irgoncalves/irule-cve-2022-22965
CVE-2022-22965CRITICALbajo ataque06 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 2
The demo code showing the recent Spring4Shell RCE (CVE-2022-22965)
CVE-2022-22965CRITICALbajo ataque06 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC
Spring4Shell is a critical RCE vulnerability in the Java Spring Framework and is one of three related vulnerabilities published on March 30
CVE-2022-22965CRITICALbajo ataque05 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 3
Exploit Of Spring4Shell!
CVE-2022-22965CRITICALbajo ataque05 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC
Spring Framework RCE Exploit
CVE-2022-22965CRITICALbajo ataque05 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 2
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
CVE-2022-22965CRITICALbajo ataque05 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2022-0185HIGHbajo ataque05 abr 2022
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RIESGO
abrir ↗
GitHub PoC★ 1
Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965.
CVE-2022-22965CRITICALbajo ataque05 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 40
CVE-2021-22555 exploit rewritten with pipe primitive
CVE-2021-22555HIGHbajo ataque05 abr 2022
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
100RIESGO
abrir ↗
GitHub PoC★ 1
CVE-2022-22963 research
CVE-2022-22963CRITICALbajo ataque05 abr 2022
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po
100RIESGO
abrir ↗
GitHub PoC★ 3
CVE-2020-24186的攻击脚本
CVE-2020-24186CRITICAL05 abr 2022
A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo
85RIESGO
abrir ↗
GitHub PoC
CVE-2022-22947 reproduce
CVE-2022-22947CRITICALbajo ataque05 abr 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-22555HIGHbajo ataque05 abr 2022
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALbajo ataque05 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
Metasploit600
Dompdf RCE via Malicious Font Caching (CVE-2022-28368)
CVE-2022-28368—05 abr 2022
Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (
60RIESGO
abrir ↗
GitHub PoC★ 16
CVE-2022-0185 exploit rewritten with pipe primitive
CVE-2022-0185HIGHbajo ataque05 abr 2022
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RIESGO
abrir ↗
GitHub PoC★ 7
CVE-2022-22965 (Spring4Shell) Proof of Concept
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 2
Intentionally vulnerable Spring app to test CVE-2022-22965
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 1
PowerShell port of CVE-2022-22965 vulnerability check by colincowie.
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 3
Another spring4shell (Spring core RCE) POC
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-42013CRITICALbajo ataqueransomware04 abr 2022
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RIESGO
abrir ↗
GitHub PoC★ 2
Spring4Shell - CVE-2022-22965
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC★ 12
Vulnerability scanner for Spring4Shell (CVE-2022-22965)
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2022-21907CRITICAL04 abr 2022
HTTP Protocol Stack Remote Code Execution Vulnerability
70RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALbajo ataque04 abr 2022
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RIESGO
abrir ↗
GitHub PoC
Proof-of-concept exploit for CVE-2016-1827 on OS X Yosemite.
CVE-2016-1827—04 abr 2022
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers
23RIESGO
abrir ↗
← anteriorpágina 591 / 2593siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.