Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados
39.383CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
83.402 exploits
GitHub PoC★ 112
Webmin <=1.984, CVE-2022-0824 Post-Auth Reverse Shell PoC
CVE-2022-0824HIGH06 mar 2022
Improper Access Control to Remote Code Execution in webmin/webmin
78RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2022-0492HIGHbajo ataque06 mar 2022
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th
86RIESGO
abrir ↗
GitHub PoC★ 2
22ke/CVE-2022-22947
CVE-2022-22947CRITICALbajo ataque05 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC★ 71
CVE-2022-22947批量
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-0185HIGHbajo ataque04 mar 2022
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-40449HIGHbajo ataqueransomware04 mar 2022
Win32k Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 8
9lyph/CVE-2022-29593
CVE-2022-29593MEDIUM04 mar 2022
relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post reques
38RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2019-11043HIGHbajo ataqueransomware04 mar 2022
Underflow in PHP-FPM can lead to RCE
100RIESGO
abrir ↗
GitHub PoC★ 7
批量url检测Spring-Cloud-Gateway-CVE-2022-22947
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC★ 9
cve-2022-22947 spring cloud gateway 批量扫描脚本
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC★ 2
Spring Cloud Gateway Actuator API 远程命令执行 CVE-2022-22947
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC
Spring Cloud Gateway远程代码执行漏洞
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC
Exp
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC
CVE-2019-11043 LAB
CVE-2019-11043HIGHbajo ataqueransomware04 mar 2022
Underflow in PHP-FPM can lead to RCE
100RIESGO
abrir ↗
GitHub PoC★ 1
puckiestyle/CVE-2021-3156
CVE-2021-3156HIGHbajo ataque04 mar 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗
GitHub PoC
port of CVE-2021-4034 exploit to Rust/cargo for my own edification
CVE-2021-4034HIGHbajo ataqueransomware04 mar 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC
日常更新一些顺手写的gobypoc，包含高危害EXP
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHbajo ataqueransomware04 mar 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC
CVE-2022-22947批量检测脚本，回显命令没进行正则，大佬们先用着，后续再更
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC★ 3
Spring-Cloud-Gateway-CVE-2022-22947
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-3156HIGHbajo ataque04 mar 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC★ 5
Greetdawn/CVE-2022-22947
CVE-2022-22947CRITICALbajo ataque04 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHbajo ataqueransomware03 mar 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC★ 27
SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er
CVE-2022-22947CRITICALbajo ataque03 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALbajo ataque03 mar 2022
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-1472MEDIUMbajo ataqueransomware03 mar 2022
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHbajo ataqueransomware03 mar 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
← anteriorpágina 690 / 2781siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.