Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.682exploits catalogados
39.953CVEs con explotación pública
24.696probados en laboratorio
85.682 exploits
GitHub PoC★ 2
Windows Print Spooler Service RCE CVE-2021-1675 (PrintNightmare)
CVE-2021-1675HIGHbajo ataqueransomware03 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-1350CRITICALbajo ataque03 jul 2021
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2016-3088CRITICALbajo ataque03 jul 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RIESGO
abrir ↗
GitHub PoC
mrezqi/CVE-2021-1675_CarbonBlack_HuntingQuery
CVE-2021-1675HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 2
killtr0/CVE-2021-1675-PrintNightmare
CVE-2021-1675HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 9
corelight/CVE-2021-1675
CVE-2021-1675HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 264
Techniques based on named pipes for pool overflow exploitation targeting the most recent (and oldest) Windows versions demonstrated on CVE-2020-17087 and an off-by-one overflow
CVE-2020-17087HIGHbajo ataque02 jul 2021
Windows Kernel Local Elevation of Privilege Vulnerability
71RIESGO
abrir ↗
GitHub PoC
A small powershell script to disable print spooler service using desired state configuration
CVE-2021-1675HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC
CVE-2021-1675: ZERO-DAY VULNERABILITY IN WINDOWS PRINTER SERVICE WITH AN EXPLOIT AVAILABLE IN ALL OPERATING SYSTEM VERSIONS
CVE-2021-1675HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB
Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated)
CVE-2021-24146—webappsphp02 jul 2021
Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
50RIESGO
abrir ↗
GitHub PoC★ 2
ubuntu new PrivEsc race condition vulnerability
CVE-2021-3560HIGHbajo ataque02 jul 2021
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RIESGO
abrir ↗
GitHub PoC★ 9
Vulnerability Scanner for CVE-2021-1675/PrintNightmare
CVE-2021-1675HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 3
thomasgeens/CVE-2021-1675
CVE-2021-1675HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB
Scratch Desktop 3.17 - Remote Code Execution
CVE-2020-7750CRITICALwebappsmultiple02 jul 2021
Cross-site Scripting (XSS)
48RIESGO
abrir ↗
GitHub PoC★ 318
JohnHammond/CVE-2021-34527
CVE-2021-34527HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB
AKCP sensorProbe SPX476 - 'Multiple' Cross-Site Scripting (XSS)
CVE-2021-35956—webappshardware02 jul 2021
Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote aut
23RIESGO
abrir ↗
GitHub PoC★ 2
Kritische Sicherheitslücke PrintNightmare CVE-2021-34527
CVE-2021-34527HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-15107CRITICALbajo ataqueransomware02 jul 2021
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RIESGO
abrir ↗
GitHub PoC★ 3
CVE-2019-15107 Webmin Exploit in C
CVE-2019-15107CRITICALbajo ataqueransomware02 jul 2021
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RIESGO
abrir ↗
Exploit-DB
Wordpress Plugin Modern Events Calendar 5.16.2 - Remote Code Execution (Authenticated)
CVE-2021-24145—webappsphp02 jul 2021
Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
60RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2021-1675HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-34527HIGHbajo ataqueransomware02 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-1675HIGHbajo ataqueransomware01 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-1675HIGHbajo ataqueransomware01 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-1675HIGHbajo ataqueransomware01 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 2
h3x0v3rl0rd/distccd_rce_CVE-2004-2687
CVE-2004-2687—01 jul 2021
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote at
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-35464CRITICALbajo ataqueransomware01 jul 2021
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pa
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-1675HIGHbajo ataqueransomware01 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 1
Proof of Concept Exploit for CVE-2021-35956, AKCP sensorProbe - 'Multiple' Cross Site Scripting (XSS)
CVE-2021-35956—01 jul 2021
Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote aut
23RIESGO
abrir ↗
GitHub PoC★ 325
Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527
CVE-2021-1675HIGHbajo ataqueransomware01 jul 2021
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗
← anteriorpágina 812 / 2857siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.