Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
78.056exploits catalogados
35.925CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8755Nuclei 4333Metasploit 3478✓ solo verificadosrecientespopularesriesgo
78.056 exploits
GitHub PoC★ 5
PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM written in python3
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC
This PowerShell script will take the mitigation measures for CVE-2021-36934 described by Microsoft and the US CERT team. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 USE AT YOUR OWN RISK -- BACKUPS MAY BREAK.
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 3
C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗VulnCheck XDB
remote-with-credentials
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
100RIESGO
abrir ↗GitHub PoC★ 1
This Repo is PoC environment of CVE-2014-6271(https://nvd.nist.gov/vuln/detail/cve-2014-6271).
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗VulnCheck XDB
remote-with-credentials
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.
50RIESGO
abrir ↗GitHub PoC
3t4n/samba-3.0.24-CVE-2007-2447-vunerable-
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RIESGO
abrir ↗GitHub PoC
Exploit Analysis of The WhatsApp Double-Free Vulnerability (CVE-2019-11932) Using the GEF-GDB Debugger
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
35RIESGO
abrir ↗Exploit-DB
Microsoft SharePoint Server 2019 - Remote Code Execution (2)
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the softwar
100RIESGO
abrir ↗Exploit-DB
ElasticSearch 7.13.3 - Memory disclosure
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the abil
60RIESGO
abrir ↗VulnCheck XDB
initial-access
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC★ 3
magichk/cve-2021-22146
All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters.
28RIESGO
abrir ↗GitHub PoC★ 1
idea-oss/laravel-CVE-2021-3129-EXP
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RIESGO
abrir ↗GitHub PoC★ 3
see https://github.com/cube0x0/CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC★ 8
Small and dirty PoC for CVE-2021-36934
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 35
PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10 version 1809 or newer
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 9
HiveNightmare a.k.a. SeriousSam Local Privilege Escalation in Windows – CVE-2021-36934
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 1
A capability to identify and remediate CVE-2021-36934 (HiveNightmare)
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 1
CVE-2021-36934 PowerShell Fix
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗GitHub PoC★ 2
Windows Elevation of Privilege Vulnerability (SeriousSAM)
Windows Elevation of Privilege Vulnerability
98RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.