Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados

34.597CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.708 exploits

GitHub PoC

Improved code of Daniele Scanu SQL Injection exploit

CVE-2019-9053—20 nov 2023

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RIESGO

abrir ↗

GitHub PoC

Learn more things, not suck all things

CVE-2023-1177CRITICAL20 nov 2023

Path Traversal: '\..\filename' in mlflow/mlflow

75RIESGO

abrir ↗

GitHub PoC

Scripts to get infos

CVE-2023-4966CRITICALbajo ataqueransomware20 nov 2023

Unauthenticated sensitive information disclosure

100RIESGO

abrir ↗

GitHub PoC

b3pwn3d/CVE-2017-7921

CVE-2017-7921CRITICALbajo ataque20 nov 2023

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2023-46604CRITICALbajo ataqueransomware20 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC

CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware20 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC

nitzanoligo/CVE-2023-46604-demo

CVE-2023-46604CRITICALbajo ataqueransomware20 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC

A POC of a type confusion bug in chakracore framework that leads to code execute.

CVE-2019-0567—19 nov 2023

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RIESGO

abrir ↗

GitHub PoC

rhymsc/CVE-2022-44877-RCE

CVE-2022-44877CRITICALbajo ataque18 nov 2023

100RIESGO

abrir ↗

GitHub PoC

wshinkle/CVE-2023-2982

CVE-2023-2982CRITICAL18 nov 2023

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

75RIESGO

abrir ↗

GitHub PoC★ 3

NKeshawarz/CVE-2023-46604-RCE

CVE-2023-46604CRITICALbajo ataqueransomware18 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC★ 13

Quick test for CVE-2023-26025 behaviours

CVE-2023-36025HIGHbajo ataque17 nov 2023

Windows SmartScreen Security Feature Bypass Vulnerability

93RIESGO

abrir ↗

GitHub PoC★ 52

exploit for cve-2023-47246 SysAid RCE (shell upload)

CVE-2023-47246CRITICALbajo ataqueransomware17 nov 2023

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a f

100RIESGO

abrir ↗

GitHub PoC★ 64

CVE-2023-20198 Exploit PoC

CVE-2023-20198CRITICALbajo ataque16 nov 2023

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2023-46604环境复现包

CVE-2023-46604CRITICALbajo ataqueransomware16 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC

SynixCyberCrimeMY CVE Exploiter By SamuraiMelayu1337 & ?/h4zzzzzz.scc

CVE-2022-29464CRITICALbajo ataqueransomware16 nov 2023

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 4

WinRAR-6.22、CVE-2023-38831、CNNVD-202308-1943、DM-202307-003730、QVD-2023-19572漏洞复现

CVE-2023-38831HIGHbajo ataqueransomware15 nov 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC

Ansible Playbook for CVE-2023-36845(Juniper Networks Junos OS 远程代码执行漏洞)

CVE-2023-36845CRITICALbajo ataque15 nov 2023

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RIESGO

abrir ↗

GitHub PoC

POC repo for CVE-2023-46604

CVE-2023-46604CRITICALbajo ataqueransomware15 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC

NataliSemi/-CVE-2022-44268

CVE-2022-44268MEDIUM14 nov 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

GitHub PoC★ 2

An improved POC exploit based on the reported CVE on exploitdb

CVE-2023-32707HIGH14 nov 2023

‘edit_user’ Capability Privilege Escalation

78RIESGO

abrir ↗

GitHub PoC★ 3

MrR0b0t19/CVE-2023-41064

CVE-2023-41064HIGHbajo ataque13 nov 2023

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1

76RIESGO

abrir ↗

GitHub PoC

Обнаружение эксплойта CVE-2023-28252

CVE-2023-28252HIGHbajo ataqueransomware13 nov 2023

Windows Common Log File System Driver Elevation of Privilege Vulnerability

98RIESGO

abrir ↗

GitHub PoC

Log4j Vulnerability RCE - CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware13 nov 2023

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC

Spring4Shell Vulnerability RCE - CVE-2022-22965

CVE-2022-22965CRITICALbajo ataque12 nov 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC★ 18

This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol.

CVE-2023-46604CRITICALbajo ataqueransomware12 nov 2023

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RIESGO

abrir ↗

GitHub PoC

ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022—11 nov 2023

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands

23RIESGO

abrir ↗

GitHub PoC★ 3

huiwen-yayaya/CVE-2023-4863

CVE-2023-4863HIGHbajo ataque11 nov 2023

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RIESGO

abrir ↗

GitHub PoC

A simple exploit for CVE-2019-2725.

CVE-2019-2725HIGHbajo ataqueransomware11 nov 2023

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RIESGO

abrir ↗

GitHub PoC

exp

CVE-2023-34039CRITICAL10 nov 2023

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g

75RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.