Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados

39.298CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

82.875 exploits

GitHub PoC★ 2

Essay (and PoCs) about CVE-2021-41773, a remote code execution vulnerability in Apache 2.4.49 🕸️

CVE-2021-41773HIGHbajo ataqueransomware12 may 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 2

Nuclei Template for CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware12 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 6

Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services

CVE-2022-26923HIGHbajo ataque12 may 2022

Active Directory Domain Services Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-41773HIGHbajo ataqueransomware12 may 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware12 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Exploit-DB

F5 BIG-IP 16.0.x - Remote Code Execution (RCE)

CVE-2022-1388CRITICALbajo ataqueransomwareremotemultiple12 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2020-0688HIGHbajo ataqueransomware12 may 2022

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware12 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware11 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Exploit-DB

WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated)

CVE-2022-1103—webappsphp11 may 2022

Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload

28RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware11 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware11 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware11 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Exploit-DB

WordPress Plugin Blue Admin 21.06.01 - Cross-Site Request Forgery (CSRF)

CVE-2021-24581—webappsphp11 may 2022

Blue Admin <= 21.06.01 - CSRF to Stored Cross-Site Scripting (XSS)

23RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware11 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 7

A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.

CVE-2022-26937CRITICAL11 may 2022

Windows Network File System Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 1

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.

CVE-2013-4710—11 may 2022

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp

50RIESGO

abrir ↗

Exploit-DB

MyBB 1.8.29 - MyBB 1.8.29 - Remote Code Execution (RCE) (Authenticated)

CVE-2022-24734HIGHwebappsphp11 may 2022

Remote code execution in mybb

78RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388 Scanner

CVE-2022-1388CRITICALbajo ataqueransomware11 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Exploit-DB

Akka HTTP 10.1.14 - Denial of Service

CVE-2021-42697—remotemultiple11 may 2022

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, whic

35RIESGO

abrir ↗

Exploit-DB

Ruijie Reyee Mesh Router - Remote Code Execution (RCE) (Authenticated)

CVE-2021-43164—remotehardware11 may 2022

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.191

35RIESGO

abrir ↗

Exploit-DB

Google Chrome 78.0.3904.70 - Remote Code Execution

CVE-2019-13720HIGHbajo ataqueremotemultiple11 may 2022

Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap

83RIESGO

abrir ↗

Exploit-DB

DLINK DIR850 - Open Redirect

CVE-2021-46379—remotehardware11 may 2022

DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrust

43RIESGO

abrir ↗

Exploit-DB

Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS)

CVE-2021-31673—webappsmultiple11 may 2022

A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remo

23RIESGO

abrir ↗

Exploit-DB

Anuko Time Tracker - SQLi (Authenticated)

CVE-2022-24707HIGHwebappsphp11 may 2022

SQL injection in anuko timetracker

41RIESGO

abrir ↗

GitHub PoC★ 5

AmirHoseinTangsiriNET/CVE-2022-1388-Scanner

CVE-2022-1388CRITICALbajo ataqueransomware11 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)

CVE-2021-44595—localwindows11 may 2022

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send m

28RIESGO

abrir ↗

Exploit-DB

DLINK DIR850 - Insecure Access Control

CVE-2021-46378—remotehardware11 may 2022

DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote

35RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2012-6636—11 may 2022

The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote atta

50RIESGO

abrir ↗

Exploit-DB

ExifTool 12.23 - Arbitrary Code Execution

CVE-2021-22204MEDIUMbajo ataquelocallinux11 may 2022

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.