Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados
39.383CVEs con explotación pública
24.695probados en laboratorio
83.554 exploits
VulnCheck XDB
info-leak
CVE-2021-21311HIGHbajo ataque14 feb 2022
SSRF in adminer
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-20699CRITICALbajo ataque14 feb 2022
Cisco Small Business RV Series Routers Vulnerabilities
100RIESGO
abrir ↗
GitHub PoC★ 6
r1l4-i3pur1l4/CVE-2022-21882
CVE-2022-21882HIGHbajo ataqueransomware14 feb 2022
Win32k Elevation of Privilege Vulnerability
98RIESGO
abrir ↗
GitHub PoC
CVE-2021-3156 deep dive.
CVE-2021-3156HIGHbajo ataque14 feb 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2022-21882HIGHbajo ataqueransomware14 feb 2022
Win32k Elevation of Privilege Vulnerability
98RIESGO
abrir ↗
GitHub PoC★ 2
All stages of exploring the polkit CVE-2021-4034 using codeql
CVE-2021-4034HIGHbajo ataqueransomware14 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC★ 32
pwncat module that automatically exploits CVE-2021-4034 (pwnkit)
CVE-2021-4034HIGHbajo ataqueransomware13 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC★ 2
A tool to automate the exploit PWNKIT (CVE-2021-4034)
CVE-2021-4034HIGHbajo ataqueransomware13 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC
Python exploit for CVE-2017-8917 - Joomla 3.7.0 'com_fields' SQL Injection
CVE-2017-8917—13 feb 2022
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RIESGO
abrir ↗
GitHub PoC★ 8
f4T1H's PoC script for CVE-2021-3560 Polkit D-Bus Privilege Escalation
CVE-2021-3560HIGHbajo ataque13 feb 2022
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗
GitHub PoC★ 3
A simple PWNKIT file to convert you to root
CVE-2021-4034HIGHbajo ataqueransomware13 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHbajo ataqueransomware13 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHbajo ataqueransomware13 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-3560HIGHbajo ataque13 feb 2022
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHbajo ataqueransomware13 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHbajo ataqueransomware13 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHbajo ataqueransomware12 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC★ 3
Log4j vulner testing environment based on CVE-2021-44228. It provide guidance to build the sample infrastructure and the exploit scripts. Supporting cooki3 script as the main exploit tools & integration
CVE-2021-44228CRITICALbajo ataqueransomware12 feb 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗
GitHub PoC
CVE-2014-1767在win7_x64平台的EXP和分析文章
CVE-2014-1767—12 feb 2022
Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Wind
28RIESGO
abrir ↗
GitHub PoC
This repository is for Log4j 2021 (CVE-2021-44228) Vulnerability demonstration and mitigation.
CVE-2021-44228CRITICALbajo ataqueransomware12 feb 2022
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗
GitHub PoC
an0n7os/CVE-2021-4034
CVE-2021-4034HIGHbajo ataqueransomware12 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC★ 17
purple-WL/wordpress-CVE-2022-21661
CVE-2022-21661HIGH12 feb 2022
SQL injection in WordPress
78RIESGO
abrir ↗
GitHub PoC★ 1
purple-WL/Jenkins_CVE-2019-1003000
CVE-2019-1003000—12 feb 2022
A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/
60RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2022-21661HIGH12 feb 2022
SQL injection in WordPress
78RIESGO
abrir ↗
GitHub PoC
pwnkit exploit
CVE-2021-4034HIGHbajo ataqueransomware11 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
GitHub PoC
docker lab setup for kibana-7609
CVE-2019-7609CRITICALbajo ataque10 feb 2022
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker
100RIESGO
abrir ↗
Exploit-DB
WordPress Plugin Secure Copy Content Protection and Content Locking 2.8.1 - SQL-Injection (Unauthenticated)
CVE-2021-24931—webappsphp10 feb 2022
Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection
60RIESGO
abrir ↗
GitHub PoC
puckiestyle/CVE-2022-20699
CVE-2022-20699CRITICALbajo ataque10 feb 2022
Cisco Small Business RV Series Routers Vulnerabilities
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-20699CRITICALbajo ataque10 feb 2022
Cisco Small Business RV Series Routers Vulnerabilities
100RIESGO
abrir ↗
GitHub PoC
Polkit pkexec CVE-2021-4034 Proof Of Concept and Patching
CVE-2021-4034HIGHbajo ataqueransomware10 feb 2022
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RIESGO
abrir ↗
← anteriorpágina 697 / 2786siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.