Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.526exploits catalogados

34.478CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8213Nuclei 4218Metasploit 3464✓ solo verificadosrecientes populares riesgo

13.654 exploits

GitHub PoC★ 2

CVE-2024-0012批量检测脚本

CVE-2024-0012CRITICALbajo ataqueransomware22 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

abrir ↗

GitHub PoC

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

CVE-2024-52433CRITICAL22 nov 2024

WordPress My Geo Posts Free plugin <= 1.2 - PHP Object Injection vulnerability

63RIESGO

abrir ↗

GitHub PoC

Broken Authentication in Wordpress plugin (Wawp Plugin < 3.0.18)

CVE-2024-52475CRITICAL22 nov 2024

WordPress Wawp plugin < 3.0.18 - Account Takeover vulnerability

48RIESGO

abrir ↗

GitHub PoC★ 1

This is POC of CVE-2024-29671

CVE-2024-29671CRITICAL21 nov 2024

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code vi

53RIESGO

abrir ↗

GitHub PoC★ 2

This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as vulnerable and logs results to vuln.txt. Simple and efficient, it helps security researchers and admins detect and address risks quickly.

CVE-2024-8856CRITICAL21 nov 2024

Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

85RIESGO

abrir ↗

GitHub PoC★ 1

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

CVE-2024-10508CRITICAL21 nov 2024

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

48RIESGO

abrir ↗

GitHub PoC

POC for CVE-2024-10924 written in Python

CVE-2024-10924CRITICAL20 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC

FAFAF

CVE-2018-15473MEDIUM20 nov 2024

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

abrir ↗

GitHub PoC★ 1

PANW NGFW CVE-2024-0012

CVE-2024-0012CRITICALbajo ataqueransomware20 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

abrir ↗

GitHub PoC

GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization

CVE-2024-6330CRITICAL20 nov 2024

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

48RIESGO

abrir ↗

GitHub PoC

CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability

CVE-2024-52316CRITICAL20 nov 2024

Apache Tomcat: Authentication bypass when using Jakarta Authentication API

48RIESGO

abrir ↗

GitHub PoC

CVE-2023-28354

CVE-2023-28354CRITICAL20 nov 2024

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against aff

48RIESGO

abrir ↗

GitHub PoC★ 3

Vulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164

CVE-2024-10924CRITICAL20 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC

PoC for PAN-OS Exploit

CVE-2024-9474MEDIUMbajo ataqueransomware20 nov 2024

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RIESGO

abrir ↗

GitHub PoC★ 19

Exploits Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924).

CVE-2024-10924CRITICAL19 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC★ 45

PAN-OS auth bypass + RCE

CVE-2024-9474MEDIUMbajo ataqueransomware19 nov 2024

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

100RIESGO

abrir ↗

GitHub PoC★ 143

WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

CVE-2024-49039HIGHbajo ataqueransomware19 nov 2024

Windows Task Scheduler Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC

Simple Python script

CVE-2024-10924CRITICAL19 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC★ 3

Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (npm:bower)

CVE-2024-42640CRITICAL19 nov 2024

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Explo

75RIESGO

abrir ↗

GitHub PoC★ 20

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

CVE-2024-0012CRITICALbajo ataqueransomware19 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

abrir ↗

GitHub PoC★ 24

watchtowrlabs/palo-alto-panos-cve-2024-0012

CVE-2024-0012CRITICALbajo ataqueransomware19 nov 2024

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

100RIESGO

abrir ↗

GitHub PoC

ubaydev/CVE-2024-10508

CVE-2024-10508CRITICAL19 nov 2024

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

48RIESGO

abrir ↗

GitHub PoC

wudidwo/CVE-2017-12615-poc

CVE-2017-12615HIGHbajo ataqueransomware19 nov 2024

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

abrir ↗

GitHub PoC★ 8

WARNING: This is a vulnerable application to test the exploit for the Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924). Run it at your own risk!

CVE-2024-10924CRITICAL18 nov 2024

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

85RIESGO

abrir ↗

GitHub PoC

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

CVE-2024-3806CRITICAL18 nov 2024

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

48RIESGO

abrir ↗

GitHub PoC

Andriod binder bug record

CVE-2019-2215HIGHbajo ataque18 nov 2024

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RIESGO

abrir ↗

GitHub PoC★ 2

Vuln disclosure for XOne app

CVE-2024-54820CRITICAL17 nov 2024

XOne Web Monitor v02.10.2024.530 framework 1.0.4.9 was discovered to contain a SQL injection vulnerability in the login

48RIESGO

abrir ↗

GitHub PoC★ 2

Relais 2FA <= 1.0 - Authentication Bypass

CVE-2024-10245CRITICAL17 nov 2024

Relais 2FA <= 1.0 - Authentication Bypass

48RIESGO

abrir ↗

GitHub PoC★ 2

WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability

CVE-2024-8856CRITICAL16 nov 2024

Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

85RIESGO

abrir ↗

GitHub PoC★ 1

jesicatjan/WordPress-NotificationX-CVE-2024-1698

CVE-2024-1698CRITICAL16 nov 2024

NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection

85RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.