Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados

34.597CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.727 exploits

GitHub PoC★ 80

检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare

CVE-2022-26923HIGHbajo ataque17 oct 2023

Active Directory Domain Services Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 43

Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions.

CVE-2023-4911HIGHbajo ataque17 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 1

This repository has the sole purpose of rewriting the CVE-2019-9053 script, which in the original publication is written in Python 2.7. I will be using Python 3.

CVE-2019-9053—16 oct 2023

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve

35RIESGO

abrir ↗

GitHub PoC

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution

CVE-2011-2523—16 oct 2023

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2023-41993

CVE-2023-41993HIGHbajo ataque16 oct 2023

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to

76RIESGO

abrir ↗

GitHub PoC★ 16

testing poc

CVE-2023-41993HIGHbajo ataque16 oct 2023

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to

76RIESGO

abrir ↗

GitHub PoC★ 21

A python based exploit to test out rapid reset attack (CVE-2023-44487)

CVE-2023-44487HIGHbajo ataque16 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC★ 202

po6ix/POC-for-CVE-2023-41993

CVE-2023-41993HIGHbajo ataque15 oct 2023

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to

76RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2023-4911 LooneyTuneables

CVE-2023-4911HIGHbajo ataque14 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 76

Tool for testing mitigations and exposure to Rapid Reset DDoS (CVE-2023-44487)

CVE-2023-44487HIGHbajo ataque13 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC

Vagebondcur/IMAGE-MAGICK-CVE-2022-44268

CVE-2022-44268MEDIUM13 oct 2023

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti

55RIESGO

abrir ↗

GitHub PoC★ 1

iveresk-CVE-2023-22515

CVE-2023-22515CRITICALbajo ataqueransomware13 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 3

Confluence Broken Access Control

CVE-2023-22515CRITICALbajo ataqueransomware13 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 6

Confluence Data Center & Server 权限提升漏洞 Exploit

CVE-2023-22515CRITICALbajo ataqueransomware13 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 25

Confluence Unauthorized Administrator User Addition Exploitation Script

CVE-2023-22515CRITICALbajo ataqueransomware12 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 1

ruycr4ft/CVE-2023-38831

CVE-2023-38831HIGHbajo ataqueransomware12 oct 2023

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RIESGO

abrir ↗

GitHub PoC★ 63

xortigate-cve-2023-27997

CVE-2023-27997CRITICALbajo ataqueransomware12 oct 2023

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi

100RIESGO

abrir ↗

GitHub PoC

CVE-2023-44487

CVE-2023-44487HIGHbajo ataque12 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC

Test Script for CVE-2023-44487

CVE-2023-44487HIGHbajo ataque12 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC★ 9

delsploit/CVE-2023-27997

CVE-2023-27997CRITICALbajo ataqueransomware12 oct 2023

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi

100RIESGO

abrir ↗

GitHub PoC

Security Vulnerability - Kardex Mlog MCC

CVE-2023-22855CRITICAL11 oct 2023

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 808

53RIESGO

abrir ↗

GitHub PoC★ 18

CVE-2023-4911

CVE-2023-4911HIGHbajo ataque11 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

GitHub PoC★ 110

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

CVE-2023-22515CRITICALbajo ataqueransomware11 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 56

Proof of concept for DoS exploit

CVE-2023-44487HIGHbajo ataque11 oct 2023

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

93RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server

CVE-2023-22515CRITICALbajo ataqueransomware11 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 153

CVE-2023-22515: Confluence Broken Access Control Exploit

CVE-2023-22515CRITICALbajo ataqueransomware10 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC★ 8

Poc for CVE-2023-22515

CVE-2023-22515CRITICALbajo ataqueransomware10 oct 2023

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RIESGO

abrir ↗

GitHub PoC

Apache Superset 默认SECRET_KEY 漏洞(CVE-2023-27524)

CVE-2023-27524HIGHbajo ataque10 oct 2023

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

100RIESGO

abrir ↗

GitHub PoC★ 1

WebAccess远程命令执行漏洞(CVE-2017-16720)复现

CVE-2017-16720—10 oct 2023

A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within th

35RIESGO

abrir ↗

GitHub PoC★ 29

hadrian3689/looney-tunables-CVE-2023-4911

CVE-2023-4911HIGHbajo ataque10 oct 2023

Glibc: buffer overflow in ld.so leading to privilege escalation

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.