Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.866exploits catalogados

35.812CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientes populares riesgo

77.866 exploits

GitHub PoC★ 1

a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit.

CVE-2014-6287CRITICALbajo ataque03 dic 2021

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RIESGO

GitHub PoC

MaximeSchlegel/CVE-2021-32724-Target

CVE-2021-32724CRITICAL03 dic 2021

check-spelling workflow vulnerable to GITHUB_TOKEN leakage via symlink attack

48RIESGO

VulnCheck XDB

initial-access

CVE-2021-22205CRITICALbajo ataqueransomware03 dic 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

VulnCheck XDB

infoleak

CVE-2021-21402HIGH02 dic 2021

Unauthenticated Arbitrary File Access in Jellyfin

78RIESGO

GitHub PoC

dearpan/cve-2018-9995

CVE-2018-9995—02 dic 2021

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RIESGO

GitHub PoC★ 1

CVE-2021-42325 POC

CVE-2021-42325—02 dic 2021

Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.

28RIESGO

VulnCheck XDB

local

CVE-2021-41379MEDIUMbajo ataqueransomware02 dic 2021

Windows Installer Elevation of Privilege Vulnerability

68RIESGO

GitHub PoC

A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287

CVE-2014-6287CRITICALbajo ataque02 dic 2021

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RIESGO

VulnCheck XDB

initial-access

CVE-2019-12725—02 dic 2021

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap

60RIESGO

Metasploit300

Grafana Plugin Path Traversal

CVE-2021-43798HIGHbajo ataque02 dic 2021

Grafana path traversal

100RIESGO

Metasploit600

Ivanti Cloud Services Appliance (CSA) Command Injection

CVE-2021-44529CRITICALbajo ataqueransomware02 dic 2021

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execut

100RIESGO

VulnCheck XDB

infoleak

CVE-2020-17519CRITICALbajo ataque02 dic 2021

Apache Flink directory traversal attack: reading remote files through the REST API

100RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2018-9995—02 dic 2021

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RIESGO

VulnCheck XDB

initial-access

CVE-2014-6287CRITICALbajo ataque02 dic 2021

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-25646—02 dic 2021

Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.

60RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2021-1675HIGHbajo ataqueransomware01 dic 2021

Windows Print Spooler Remote Code Execution Vulnerability

100RIESGO

Exploit-DB

Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting

CVE-2021-40577—webappsphp01 dic 2021

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP an

23RIESGO

VulnCheck XDB

local

CVE-2021-30807HIGHbajo ataque30 nov 2021

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS

76RIESGO

VulnCheck XDB

infoleak

CVE-2021-43778CRITICAL30 nov 2021

Path traversal in GLPI barcode plugin

75RIESGO

GitHub PoC★ 3

CVE-2021-43778 poc

CVE-2021-43778CRITICAL30 nov 2021

Path traversal in GLPI barcode plugin

75RIESGO

GitHub PoC★ 5

Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s)

CVE-2021-30807HIGHbajo ataque30 nov 2021

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS

76RIESGO

GitHub PoC★ 1

Sigma-Rule-for-CVE-2021-40438-Attack-Attemp

CVE-2021-40438CRITICALbajo ataqueransomware30 nov 2021

mod_proxy SSRF

100RIESGO

VulnCheck XDB

initial-access

CVE-2021-41653—29 nov 2021

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to r

60RIESGO

VulnCheck XDB

initial-access

CVE-2020-11978HIGHbajo ataque28 nov 2021

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was disco

100RIESGO

GitHub PoC

Strapi Framework, 3.0.0-beta.17.4

CVE-2019-19609—27 nov 2021

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c

35RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2021-42321HIGHbajo ataqueransomware27 nov 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2019-19609—27 nov 2021

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c

35RIESGO

VulnCheck XDB

infoleak

CVE-2021-22205CRITICALbajo ataqueransomware27 nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

GitHub PoC★ 1

NSE script to fingerprint if GitLab is vulnerable to cve-2021-22205-nse

CVE-2021-22205CRITICALbajo ataqueransomware27 nov 2021

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

GitHub PoC

Detect with python and tracking IP

CVE-2018-7600CRITICALbajo ataqueransomware26 nov 2021

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.