Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados

34.597CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.708 exploits

GitHub PoC

DDayLuong/CVE-2021-3156

CVE-2021-3156HIGHbajo ataque27 dic 2023

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2023-41892

CVE-2023-41892CRITICAL26 dic 2023

Craft CMS Remote Code Execution vulnerability

85RIESGO

abrir ↗

GitHub PoC★ 1

This is a exploit of CVE-2021-32305 a web vulnerability to command injection on search.php path, this exploit allows execute commands.

CVE-2021-32305—26 dic 2023

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RIESGO

abrir ↗

GitHub PoC★ 1

MkJos/CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246CRITICALbajo ataque26 dic 2023

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RIESGO

abrir ↗

GitHub PoC★ 5

Exploit for Arbitrary File Read for CVE-2023-26360 - Adobe Coldfusion

CVE-2023-26360HIGHbajo ataque26 dic 2023

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RIESGO

abrir ↗

GitHub PoC

tannlh/CVE-2018-20250

CVE-2018-20250HIGHbajo ataqueransomware26 dic 2023

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RIESGO

abrir ↗

GitHub PoC★ 9

🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓

CVE-2021-4045CRITICAL26 dic 2023

TP-LINK Tapo C200 remote code execution vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 2

Exploit Development using python for CVE-2023-38831 (POC)

CVE-2023-38831HIGHbajo ataqueransomware26 dic 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC

kimstars/POC-CVE-2022-28117

CVE-2022-28117—26 dic 2023

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the ap

43RIESGO

abrir ↗

GitHub PoC★ 1

TP-Link Archer AX21 - Unauthenticated Command Injection [Loader]

CVE-2023-1389HIGHbajo ataque25 dic 2023

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability i

100RIESGO

abrir ↗

GitHub PoC★ 1

Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration testing and ethical hacking. Developed and maintained by Mohamed Mounir Boudjema, this repository is crafted with a deep understanding of the evolving landscape of cybersecurity.

CVE-2023-6710MEDIUM25 dic 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RIESGO

abrir ↗

GitHub PoC★ 2

Explore the depths of CVE-2023-6710 with our comprehensive Proof of Concept (PoC). This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks.

CVE-2023-6710MEDIUM25 dic 2023

Mod_cluster/mod_proxy_cluster: stored cross site scripting

33RIESGO

abrir ↗

GitHub PoC★ 13

dust-life/CVE-2019-18935-memShell

CVE-2019-18935CRITICALbajo ataqueransomware25 dic 2023

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RIESGO

abrir ↗

GitHub PoC

CVE-2023-46604 - ApacheMQ Version 5.15.5 Vulnerability Machine: Broker

CVE-2023-46604CRITICALbajo ataqueransomware23 dic 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 2

puckiestyle/CVE-2023-4911

CVE-2023-4911HIGHbajo ataque23 dic 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 18

puckiestyle/CVE-2023-0386

CVE-2023-0386HIGHbajo ataque23 dic 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

86RIESGO

abrir ↗

GitHub PoC★ 2

Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key

CVE-2016-4437CRITICALbajo ataque22 dic 2023

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RIESGO

abrir ↗

GitHub PoC★ 16

CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that leads to Remote Command Execution via crafted docx document.

CVE-2023-50254CRITICAL22 dic 2023

Deepin Reader RCE vulnerability due to a design flaw

48RIESGO

abrir ↗

GitHub PoC★ 4

Guillaume-Risch/cve-2023-29357-Sharepoint

CVE-2023-29357CRITICALbajo ataqueransomware22 dic 2023

Microsoft SharePoint Server Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

Directory Traversal and Arbitrary File Read on Grafana

CVE-2021-43798HIGHbajo ataque21 dic 2023

Grafana path traversal

100RIESGO

abrir ↗

GitHub PoC★ 13

substing/CVE-2020-24186_reverse_shell_upload

CVE-2020-24186CRITICAL21 dic 2023

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allo

85RIESGO

abrir ↗

GitHub PoC

That-Guy-Steve/CVE-2018-1133-Exploit

CVE-2018-1133—20 dic 2023

An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code exec

35RIESGO

abrir ↗

GitHub PoC★ 5

Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)

CVE-2009-3103—20 dic 2023

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window

60RIESGO

abrir ↗

GitHub PoC

OwnCloud CVE-2023-49103

CVE-2023-49103CRITICALbajo ataque19 dic 2023

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies

100RIESGO

abrir ↗

GitHub PoC

Binaries for "CVE-2023-23752"

CVE-2023-23752MEDIUMbajo ataque19 dic 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 25

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

CVE-2023-4863HIGHbajo ataque19 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC★ 1

Arszilla/CVE-2023-6538

CVE-2023-6538HIGH18 dic 2023

System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via unprivileged access to SMU configuration backup data.

41RIESGO

abrir ↗

GitHub PoC

jee web project with log4shell (CVE-2021-44228) vulnerability

CVE-2021-44228CRITICALbajo ataqueransomware18 dic 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 54

LiveOverflow/webp-CVE-2023-4863

CVE-2023-4863HIGHbajo ataque18 dic 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC

An implementation of a proof-of-concept for CVE-2018-5767

CVE-2018-5767—18 dic 2023

An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code

35RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.