Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados
40.037CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientespopularesriesgo
85.883 exploits
VulnCheck XDB
local
CVE-2021-3156HIGHbajo ataque16 mar 2021
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗
GitHub PoC★ 33
ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.
CVE-2021-26855CRITICALbajo ataqueransomware16 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21973MEDIUMbajo ataque16 mar 2021
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of UR
100RIESGO
abrir ↗
GitHub PoC★ 1
automate me!
CVE-2021-21973MEDIUMbajo ataque16 mar 2021
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of UR
100RIESGO
abrir ↗
GitHub PoC★ 3
Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange
CVE-2021-26855CRITICALbajo ataqueransomware16 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 6
Mr-xn/CVE-2021-26855-d
CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SonLogger 4.2.3.3 - Unauthenticated Arbitrary File Upload (Metasploit)
CVE-2021-27964—webappsmultiple15 mar 2021
SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Con
50RIESGO
abrir ↗
GitHub PoC★ 4
patched to work
CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-27065HIGHbajo ataqueransomware15 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 810
Sudo Baron Samedit Exploit
CVE-2021-3156HIGHbajo ataque15 mar 2021
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 28
CVE-2021-26855 & CVE-2021-27065
CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware15 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-3156HIGHbajo ataque15 mar 2021
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RIESGO
abrir ↗
Exploit-DB
Zenario CMS 8.8.53370 - 'id' Blind SQL Injection
CVE-2021-26830—webappsphp15 mar 2021
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin
23RIESGO
abrir ↗
GitHub PoC★ 28
CVE-2021-26855: PoC (Not a HoneyPoC for once!)
CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB
Microsoft Exchange 2019 - Server-Side Request Forgery
CVE-2021-26855CRITICALbajo ataqueransomwareremotewindows14 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 22
RCE exploit for Microsoft Exchange Server (CVE-2021-26855).
CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 1
Exploit Samba
CVE-2007-2447—14 mar 2021
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RIESGO
abrir ↗
GitHub PoC★ 9
RCE exploit for ProxyLogon vulnerability in Microsoft Exchange
CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALbajo ataqueransomware14 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware12 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 3
Scanner and PoC for CVE-2021-26855
CVE-2021-26855CRITICALbajo ataqueransomware12 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC
vonderchild/CVE-2016-3088
CVE-2016-3088CRITICALbajo ataque12 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware12 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2016-3088CRITICALbajo ataque12 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RIESGO
abrir ↗
GitHub PoC
Will write a python script for exploiting this vulnerability
CVE-2020-25213CRITICALbajo ataque12 mar 2021
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RIESGO
abrir ↗
← anteriorpágina 838 / 2863siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.