Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

72.018exploits catalogados

32.219CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8195Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

8182 exploits

VulnCheck XDB

initial-access

CVE-2023-46604CRITICALbajo ataqueransomware27 oct 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALbajo ataqueransomware27 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-3519CRITICALbajo ataqueransomware27 oct 2023

Unauthenticated remote code execution

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-22515CRITICALbajo ataqueransomware27 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-5360—26 oct 2023

Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

60RIESGO

VulnCheck XDB

local

CVE-2023-46604CRITICALbajo ataqueransomware26 oct 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

VulnCheck XDB

infoleak

CVE-2021-43798HIGHbajo ataque26 oct 2023

Grafana path traversal

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-23752MEDIUMbajo ataque26 oct 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-23397CRITICALbajo ataque26 oct 2023

Microsoft Outlook Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-38646—26 oct 2023

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman

60RIESGO

VulnCheck XDB

local

CVE-2023-4911HIGHbajo ataque25 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-38646—25 oct 2023

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman

60RIESGO

VulnCheck XDB

denial-of-service

CVE-2023-44487HIGHbajo ataque25 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

VulnCheck XDB

initial-access

CVE-2019-10149CRITICALbajo ataque25 oct 2023

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-23752MEDIUMbajo ataque25 oct 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALbajo ataqueransomware25 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

VulnCheck XDB

infoleak

CVE-2023-4966CRITICALbajo ataqueransomware24 oct 2023

Unauthenticated sensitive information disclosure

100RIESGO

VulnCheck XDB

client-side

CVE-2023-38831HIGHbajo ataqueransomware24 oct 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-23131CRITICALbajo ataque24 oct 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-29464CRITICALbajo ataqueransomware24 oct 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

VulnCheck XDB

infoleak

CVE-2017-7921CRITICALbajo ataque23 oct 2023

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

VulnCheck XDB

local

CVE-2023-36802HIGHbajo ataque23 oct 2023

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

76RIESGO

VulnCheck XDB

infoleak

CVE-2013-4786—23 oct 2023

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote

60RIESGO

VulnCheck XDB

initial-access

CVE-2023-38646—23 oct 2023

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman

60RIESGO

VulnCheck XDB

local

CVE-2021-3493HIGHbajo ataque23 oct 2023

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RIESGO

VulnCheck XDB

initial-access

CVE-2021-33044CRITICALbajo ataque22 oct 2023

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by

100RIESGO

VulnCheck XDB

initial-access

CVE-2023-22515CRITICALbajo ataqueransomware22 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.