Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados

39.298CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

82.745 exploits

GitHub PoC★ 21

All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools (MSDT) on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence.

CVE-2022-30190HIGHbajo ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 8

orwagodfather/CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware03 jun 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

GitHub PoC★ 2

Follina POC by John Hammond

CVE-2022-30190HIGHbajo ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 5

Generate SSRF payloads

CVE-2021-22054HIGHbajo ataque03 jun 2022

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

100RIESGO

GitHub PoC

Powershell script to mitigate cve-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

Exploit-DB

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection

CVE-2021-46422—remotehardware03 jun 2022

Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute

60RIESGO

GitHub PoC

This is to patch CVE-2022-30190. Use at your own risk.

CVE-2022-30190HIGHbajo ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-26134CRITICALbajo ataqueransomware03 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

VulnCheck XDB

client-side

CVE-2022-30190HIGHbajo ataqueransomware03 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-26134CRITICALbajo ataqueransomware03 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALbajo ataqueransomware03 jun 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

GitHub PoC★ 1

This repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux confluence servers.

CVE-2022-26134CRITICALbajo ataqueransomware03 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

VulnCheck XDB

infoleak

CVE-2021-22054HIGHbajo ataque03 jun 2022

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

100RIESGO

VulnCheck XDB

client-side

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2020-2551CRITICALbajo ataque02 jun 2022

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RIESGO

VulnCheck XDB

client-side

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

CVE-2020-2551 Exploiter

CVE-2020-2551CRITICALbajo ataque02 jun 2022

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RIESGO

VulnCheck XDB

client-side

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

VulnCheck XDB

local

CVE-2021-35064—02 jun 2022

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn

60RIESGO

Metasploit600

Atlassian Confluence Namespace OGNL Injection

CVE-2022-26134CRITICALbajo ataqueransomware02 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

GitHub PoC★ 3

Python script to exploit CVE-2021-35064 and CVE-2021-36356

CVE-2021-35064—02 jun 2022

KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits runn

60RIESGO

GitHub PoC★ 2

swaiist/CVE-2022-30190-Fix

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 390

CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

Mitigates the "Folina"-ZeroDay (CVE-2022-30190)

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 2

gyaansastra/CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 1

ITMarcin2211/CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 2

A very simple MSDT "Follina" exploit **patched**

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

lalkaltest/CVE-2021-43798

CVE-2021-43798HIGHbajo ataque02 jun 2022

Grafana path traversal

100RIESGO

GitHub PoC★ 23

A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190)

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 2

MSDT protocol disabler (CVE-2022-30190 patch tool)

CVE-2022-30190HIGHbajo ataqueransomware02 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.