Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.652exploits catalogados

34.545CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8225Nuclei 4228Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.708 exploits

GitHub PoC★ 1

This script will help you to scan for smbGhost vulnerability(CVE-2020-0796)

CVE-2020-0796CRITICALbajo ataqueransomware04 mar 2024

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC★ 4

A PoC exploit for CVE-2021-43798 - Grafana Directory Traversal

CVE-2021-43798HIGHbajo ataque04 mar 2024

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC★ 6

Three go-exploits exploiting CVE-2023-22527 to execute arbitrary code in memory

CVE-2023-22527CRITICALbajo ataqueransomware04 mar 2024

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2024-1071 with Docker

CVE-2024-1071CRITICAL04 mar 2024

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

85RIESGO

abrir ↗

GitHub PoC

RxRCoder/CVE-2023-2437

CVE-2023-2437CRITICAL02 mar 2024

UserPro <= 5.1.1 - Authentication Bypass to Administrator

63RIESGO

abrir ↗

GitHub PoC★ 2

abian2/CVE-2024-23652

CVE-2024-23652CRITICAL01 mar 2024

BuildKit possible host system access from mount stub cleaner

48RIESGO

abrir ↗

GitHub PoC★ 2

PoC for CVE-2024-1512 in MasterStudy LMS WordPress Plugin.

CVE-2024-1512CRITICAL01 mar 2024

MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection

85RIESGO

abrir ↗

GitHub PoC★ 3

(Mirorring)

CVE-2024-25600CRITICAL29 feb 2024

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 3

(Mirorring)

CVE-2024-1651CRITICAL29 feb 2024

Torrentpier 2.4.1 - RCE

60RIESGO

abrir ↗

GitHub PoC★ 2

dshabani96/CVE-2024-21413

CVE-2024-21413CRITICALbajo ataque29 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

letsr00t/CVE-2023-0386

CVE-2023-0386HIGHbajo ataque29 feb 2024

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RIESGO

abrir ↗

GitHub PoC★ 6

CVE-2024-23334

CVE-2024-23334MEDIUM28 feb 2024

aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

70RIESGO

abrir ↗

GitHub PoC★ 107

Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762

CVE-2024-21762CRITICALbajo ataqueransomware28 feb 2024

A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0

100RIESGO

abrir ↗

GitHub PoC

J3Ss0u/CVE-2023-41993

CVE-2023-41993HIGHbajo ataque28 feb 2024

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to

76RIESGO

abrir ↗

GitHub PoC★ 2

jakabakos/CVE-2023-39362-cacti-snmp-command-injection-poc

CVE-2023-39362HIGH28 feb 2024

Authenticated command injection in SNMP options of a Device

63RIESGO

abrir ↗

GitHub PoC

letsr00t/CVE-2021-22555

CVE-2021-22555HIGHbajo ataque27 feb 2024

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RIESGO

abrir ↗

GitHub PoC

G01d3nW01f/CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque27 feb 2024

100RIESGO

abrir ↗

GitHub PoC★ 8

Ultimate Member Unauthorized Database Access / SQLi

CVE-2024-1071CRITICAL27 feb 2024

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

85RIESGO

abrir ↗

GitHub PoC★ 1

Exploit for CVE-2022-30525

CVE-2022-30525CRITICALbajo ataque27 feb 2024

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

abrir ↗

GitHub PoC

A Craft CMS vulnerability that allows Remote Code Execution (RCE).

CVE-2023-41892CRITICAL26 feb 2024

Craft CMS Remote Code Execution vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 40

confluence CVE-2023-22527 漏洞利用工具，支持冰蝎/哥斯拉内存马注入，支持设置 http 代理

CVE-2023-22527CRITICALbajo ataqueransomware26 feb 2024

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RIESGO

abrir ↗

GitHub PoC

shenhav12/CVE-2024-25169-Mezzanine-v6.0.0

CVE-2024-25169CRITICAL25 feb 2024

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted reque

48RIESGO

abrir ↗

GitHub PoC★ 1

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

CVE-2023-22515CRITICALbajo ataqueransomware24 feb 2024

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC

CVE-2024-21887 Exploitation with Ngrok Reverse Shell

CVE-2024-21887CRITICALbajo ataqueransomware24 feb 2024

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,

100RIESGO

abrir ↗

GitHub PoC

hungdnvp/POC-CVE-2020-0796

CVE-2020-0796CRITICALbajo ataqueransomware23 feb 2024

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC★ 15

Torrentpier v2.4.1. CVE-2024-1651. Remote Code Execution (RCE). Exploit.

CVE-2024-1651CRITICAL23 feb 2024

Torrentpier 2.4.1 - RCE

60RIESGO

abrir ↗

GitHub PoC★ 3

A Scanner for CVE-2024-1709 - ConnectWise SecureConnect Authentication Bypass Vulnerability

CVE-2024-1709CRITICALbajo ataqueransomware23 feb 2024

Authentication bypass using an alternate path or channel

100RIESGO

abrir ↗

GitHub PoC★ 4

Bu betik, Microsoft Outlook'ta keşfedilen ve CVSS değeri 9.8 olan önemli bir güvenlik açığı olan CVE-2024-21413 için bir kavram kanıtı (PoC) sunmaktadır. MonikerLink hatası olarak adlandırılan bu güvenlik açığı, yerel NTLM bilgilerinin potansiyel sızıntısı ve uzaktan kod çalıştırma olasılığı dahil olmak üzere geniş kapsamlı etkilere sahiptir.

CVE-2024-21413CRITICALbajo ataque23 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 8

This tool is designed to exploit the CVE-2024-25600 vulnerability found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites. The tool automates the exploitation process by retrieving nonces and sending specially crafted requests to execute arbitrary commands.

CVE-2024-25600CRITICAL22 feb 2024

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 2

A PoC exploit for CVE-2022-33891 - Apache Spark UI Remote Code Execution (RCE)

CVE-2022-33891HIGHbajo ataque22 feb 2024

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.