Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados

39.298CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

82.877 exploits

GitHub PoC★ 3

A Zeek detector for CVE-2022-24497.

CVE-2022-24497CRITICAL13 abr 2022

Windows Network File System Remote Code Execution Vulnerability

60RIESGO

abrir ↗

GitHub PoC★ 68

CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞命令执行、批量检测脚本、文件写入

CVE-2022-22954CRITICALbajo ataqueransomware13 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC

VMware Workspace ONE Access远程代码执行漏洞 / Code By:Jun_sheng

CVE-2022-22954CRITICALbajo ataqueransomware13 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 16

VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.

CVE-2022-22954CRITICALbajo ataqueransomware13 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALbajo ataqueransomware13 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALbajo ataqueransomware13 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-26501CRITICALbajo ataqueransomware13 abr 2022

Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).

78RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2017-8917—13 abr 2022

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci

60RIESGO

abrir ↗

GitHub PoC★ 2

AkuCyberSec/CVE-2017-8917-Joomla-370-SQL-Injection

CVE-2017-8917—13 abr 2022

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci

60RIESGO

abrir ↗

GitHub PoC★ 3

A Zeek CVE-2022-24491 detector.

CVE-2022-24491CRITICAL13 abr 2022

Windows Network File System Remote Code Execution Vulnerability

60RIESGO

abrir ↗

GitHub PoC★ 2

Chocapikk/CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware12 abr 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 1

Greenwolf/CVE-2022-1175

CVE-2022-1175HIGH12 abr 2022

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 befor

63RIESGO

abrir ↗

GitHub PoC★ 3

TerraMaster TOS Unauthenticated Remote Command Execution(RCE) Vulnerability CVE-2022-24990

CVE-2022-24990CRITICALbajo ataqueransomware12 abr 2022

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

100RIESGO

abrir ↗

GitHub PoC★ 23

spring4shell | CVE-2022-22965

CVE-2022-22965CRITICALbajo ataque12 abr 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC★ 4

Greenwolf/CVE-2022-1162

CVE-2022-1162CRITICAL12 abr 2022

A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE

85RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2021-41773HIGHbajo ataqueransomware12 abr 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC

Wangsafz/cve-2017-0358.sh

CVE-2017-0358HIGH12 abr 2022

ntfs-3g: Modprobe influence vulnerability via environment variables

56RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 1

corelight/cve-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 10

PoC for CVE-2022-22954 - VMware Workspace ONE Access Freemarker Server-Side Template Injection

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 12

提供批量扫描URL以及执行命令功能。Workspace ONE Access 模板注入漏洞，可执行任意代码

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-22954 Açığı test etme

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 1

mumu2020629/-CVE-2022-22954-scanner

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC

lucksec/VMware-CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware12 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

Exploit-DB

Telesquare TLR-2855KS6 - Arbitrary File Deletion

CVE-2021-46419—webappshardware11 abr 2022

An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system fil

60RIESGO

abrir ↗

GitHub PoC★ 4

aniqfakhrul/CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware11 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

Exploit-DB

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion (LFI)

CVE-2021-46417—remotelinux11 abr 2022

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privilege

50RIESGO

abrir ↗

GitHub PoC★ 11

CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager

CVE-2022-22954CRITICALbajo ataqueransomware11 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC★ 279

POC for VMWARE CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware11 abr 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.