Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.652exploits catalogados
34.545CVEs con explotación pública
24.695probados en laboratorio
13.708 exploits
GitHub PoC
A check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability. Palo Alto 防火墙 PAN-OS 远程命令注入检测程序。
CVE-2024-3400CRITICALbajo ataqueransomware17 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC2
Have we not learnt from HoneyPoC?
CVE-2024-3400CRITICALbajo ataqueransomware17 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC9
Global Protec Palo Alto File Write Exploit
CVE-2024-3400CRITICALbajo ataqueransomware17 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC4
A go-exploit for Apache ActiveMQ CVE-2023-46604
CVE-2023-46604CRITICALbajo ataqueransomware17 abr 2024
Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
100RIESGO
abrir
GitHub PoC5
CVE-2024-3400 : Palo Alto OS Command Injection - POC
CVE-2024-3400CRITICALbajo ataqueransomware17 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC
command injection
CVE-2024-1874CRITICAL17 abr 2024
Command injection via array-ish $command parameter of proc_open()
60RIESGO
abrir
GitHub PoC8
CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect
CVE-2024-3400CRITICALbajo ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC15
Chocapikk/CVE-2024-3400
CVE-2024-3400CRITICALbajo ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC2
CONDITIONBLACK/CVE-2024-3400-POC
CVE-2024-3400CRITICALbajo ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC92
CVE-2024-3400-RCE
CVE-2024-3400CRITICALbajo ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC161
CVE-2024-3400 Palo Alto OS Command Injection
CVE-2024-3400CRITICALbajo ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC
LoanVitor/CVE-2024-3400-
CVE-2024-3400CRITICALbajo ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC34
CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect
CVE-2024-3400CRITICALbajo ataqueransomware16 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC
LeopoldSkell/CVE-2024-3273
CVE-2024-3273HIGHbajo ataque16 abr 2024
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
100RIESGO
abrir
GitHub PoC5
This is a critical UAF vulnerability exploit that affected the android binder IPC system used in the wild and discovered by P0
CVE-2019-2215HIGHbajo ataque15 abr 2024
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
98RIESGO
abrir
GitHub PoC3
dcheng69/CVE-2022-0185-Case-Study
CVE-2022-0185HIGHbajo ataque15 abr 2024
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RIESGO
abrir
GitHub PoC
Joomla! < 4.2.8 - Unauthenticated information disclosure
CVE-2023-23752MEDIUMbajo ataque15 abr 2024
[20230201] - Core - Improper access check in webservice endpoints
100RIESGO
abrir
GitHub PoC
OS 12.0 & 12.1.2 - Jailbreak with CVE-2019-6225
CVE-2019-622515 abr 2024
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.
28RIESGO
abrir
GitHub PoC
A simple bash script to check for evidence of compromise related to CVE-2024-3400
CVE-2024-3400CRITICALbajo ataqueransomware15 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC
Vulnerabilidad de palo alto
CVE-2024-3400CRITICALbajo ataqueransomware14 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC13
momika233/CVE-2024-3400
CVE-2024-3400CRITICALbajo ataqueransomware14 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC2
Simple CVE-2024-24576 PoC in Julia
CVE-2024-24576CRITICAL14 abr 2024
Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows
53RIESGO
abrir
GitHub PoC2
cve-2020-1938 Tomcat-Ajp-lfi.git脚本
CVE-2020-1938CRITICALbajo ataque14 abr 2024
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RIESGO
abrir
GitHub PoC3
A reproduction of CVE-2019-18634, sudo privilege escalation with buffer overflow.
CVE-2019-1863414 abr 2024
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the
28RIESGO
abrir
GitHub PoC1
Python script for CMS Made Simple 2.1.6 - Remote Code Execution.
CVE-2018-744814 abr 2024
Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote
28RIESGO
abrir
GitHub PoC
MAL-004: Command Injection Bypass for CVE-2020-12641 in Roundcube Webmail
CVE-2020-12641CRITICALbajo ataque13 abr 2024
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in
100RIESGO
abrir
GitHub PoC71
CVE-2024-3400
CVE-2024-3400CRITICALbajo ataqueransomware13 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC
CVE-2024-21413 Setup for CW
CVE-2024-21413CRITICALbajo ataque13 abr 2024
Microsoft Outlook Remote Code Execution Vulnerability
100RIESGO
abrir
GitHub PoC2
CerTusHack/CVE-2024-3400-PoC
CVE-2024-3400CRITICALbajo ataqueransomware13 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
GitHub PoC11
Yuvvi01/CVE-2024-3400
CVE-2024-3400CRITICALbajo ataqueransomware13 abr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
100RIESGO
abrir
anteriorpágina 232 / 457siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.