Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.652exploits catalogados

34.545CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8225Nuclei 4228Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.708 exploits

GitHub PoC★ 8

This tool is designed to exploit the CVE-2024-25600 vulnerability found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites. The tool automates the exploitation process by retrieving nonces and sending specially crafted requests to execute arbitrary commands.

CVE-2024-25600CRITICAL22 feb 2024

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

GitHub PoC★ 110

ScreenConnect AuthBypass(cve-2024-1709) --> RCE!!!

CVE-2024-1709CRITICALbajo ataqueransomware21 feb 2024

Authentication bypass using an alternate path or channel

100RIESGO

GitHub PoC★ 31

Nuclei template and information about the POC for CVE-2024-25600

CVE-2024-25600CRITICAL21 feb 2024

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RIESGO

GitHub PoC

Jason-Siu/CVE-2019-9053-Exploit-in-Python-3

CVE-2019-9053—21 feb 2024

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RIESGO

GitHub PoC★ 1

Scraping tool to ennumerate directories or files with the CVE-2024-23897 vulnerability in Jenkins.

CVE-2024-23897CRITICALbajo ataqueransomware21 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

GitHub PoC★ 7

AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

CVE-2023-5204CRITICAL21 feb 2024

AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

63RIESGO

GitHub PoC

Un script realizado en python para atumatizar la vulnerabilidad CVE-2024-23897

CVE-2024-23897CRITICALbajo ataqueransomware20 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

GitHub PoC★ 5

Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413CRITICALbajo ataque20 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 3

Android Application Vulnerability Exploit

CVE-2017-13156—20 feb 2024

An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0,

43RIESGO

GitHub PoC★ 2

Perform with massive Jenkins Reading-2-RCE

CVE-2024-23897CRITICALbajo ataqueransomware19 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

GitHub PoC

CVE-2024-21413 Açığını Kullanarak Giriş Bilgilerini Alma

CVE-2024-21413CRITICALbajo ataque19 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

Joomla! < 4.2.8 - Unauthenticated information disclosure exploit

CVE-2023-23752MEDIUMbajo ataque19 feb 2024

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

GitHub PoC★ 11

Simple python3 script to automate CVE-2018-9995

CVE-2018-9995—18 feb 2024

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RIESGO

GitHub PoC★ 1

CVE-2023-36845 – Unauthenticated Juniper Remote Code Execution Vulnerability Scanner

CVE-2023-36845CRITICALbajo ataque18 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

GitHub PoC★ 36

Auto exploitation tool for CVE-2024-24401.

CVE-2024-24401CRITICAL18 feb 2024

SQL Injection vulnerability in Nagios XI 2024R1.01 allows a remote attacker to execute arbitrary code via a crafted payl

60RIESGO

GitHub PoC★ 4

Priv esc in Nagios 2024R1.01

CVE-2024-24402CRITICAL18 feb 2024

An issue in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted script to the /usr/local/n

48RIESGO

GitHub PoC

132231g/CVE-2018-7602

CVE-2018-7602CRITICALbajo ataqueransomware18 feb 2024

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RIESGO

GitHub PoC★ 257

CVE-2024-21413 PoC for THM Lab

CVE-2024-21413CRITICALbajo ataque17 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190)

CVE-2022-30190HIGHbajo ataqueransomware17 feb 2024

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code.

CVE-2023-36845CRITICALbajo ataque17 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

GitHub PoC★ 43

POC for CVE-2024-23897 Jenkins File-Read

CVE-2024-23897CRITICALbajo ataqueransomware16 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

GitHub PoC

Jenkins Arbitrary File Leak Vulnerability [CVE-2024-23897]

CVE-2024-23897CRITICALbajo ataqueransomware16 feb 2024

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an

100RIESGO

GitHub PoC★ 10

AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777

CVE-2023-48777CRITICAL16 feb 2024

WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

63RIESGO

GitHub PoC★ 765

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413CRITICALbajo ataque16 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

GitHub PoC★ 17

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - CVE-2024-21413 POC

CVE-2024-21413CRITICALbajo ataque16 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

wxrdnx/CVE-2023-38408

CVE-2023-38408CRITICAL16 feb 2024

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

70RIESGO

GitHub PoC★ 157

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC

CVE-2024-21413CRITICALbajo ataque15 feb 2024

Microsoft Outlook Remote Code Execution Vulnerability

100RIESGO

GitHub PoC

letsr00t/CVE-2022-0847

CVE-2022-0847HIGHbajo ataque15 feb 2024

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

GitHub PoC★ 1

This Python script automates the Proof of Concept (PoC) for CVE-2023-36845, a vulnerability impacting Juniper Networks Junos OS on EX and SRX Series devices. The vulnerability resides in the J-Web component, allowing remote manipulation of the PHPRC variable, potentially leading to code injection.

CVE-2023-36845CRITICALbajo ataque14 feb 2024

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

GitHub PoC★ 1

Tool for exploring CVE-2023-30547

CVE-2023-30547CRITICAL14 feb 2024

Sandbox Escape in vm2

70RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.