Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.743 exploits

GitHub PoC★ 26

CVE-2023-21839工具

CVE-2023-21839HIGHbajo ataque11 mar 2023

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

100RIESGO

abrir ↗

GitHub PoC★ 15

This is poc of CVE-2022-46169 authentication bypass and remote code execution

CVE-2022-46169CRITICALbajo ataque11 mar 2023

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC

h1bAna/CVE-2017-5123

CVE-2017-5123—11 mar 2023

Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.

23RIESGO

abrir ↗

GitHub PoC

python 2.7

CVE-2023-23752MEDIUMbajo ataque11 mar 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 1

Laravel RCE CVE-2021-3129

CVE-2021-3129CRITICALbajo ataqueransomware11 mar 2023

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RIESGO

abrir ↗

GitHub PoC

FortiRecorder Denial of Service Exploit (CVE-2022-41333)

CVE-2022-41333MEDIUM10 mar 2023

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below

33RIESGO

abrir ↗

GitHub PoC★ 11

Tomcat PUT方法任意文件写入（CVE-2017-12615）exp

CVE-2017-12615HIGHbajo ataqueransomware10 mar 2023

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

abrir ↗

GitHub PoC

Microsoft Word 远程代码执行漏洞

CVE-2023-21716CRITICAL10 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-47986: Python, Ruby, NMAP and Metasploit modules to exploit the vulnerability.

CVE-2022-47986CRITICALbajo ataqueransomware09 mar 2023

IBM Aspera Faspex code execution

100RIESGO

abrir ↗

GitHub PoC★ 7

Mass Auto Exploit CVE-2022-4395 Unauthenticated Arbitrary File Upload

CVE-2022-4395CRITICAL09 mar 2023

Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

53RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2021-1732 Microsoft Windows 10 本地提权漏研究及Poc/Exploit开发

CVE-2021-1732HIGHbajo ataqueransomware09 mar 2023

Windows Win32k Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 2

Tenda f3 Malformed HTTP Request Header Processing Vulnerability.

CVE-2020-35391CRITICAL09 mar 2023

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pas

60RIESGO

abrir ↗

GitHub PoC★ 4

SSH User Enumerator in Python3, CVE-2018-15473, I updated the code of this exploit (https://www.exploit-db.com/exploits/45939) to work with python3 instead of python2.

CVE-2018-15473MEDIUM09 mar 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2019-15107 图形化测试程序

CVE-2019-15107CRITICALbajo ataqueransomware09 mar 2023

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RIESGO

abrir ↗

GitHub PoC★ 2

开源，go多并发批量探测poc，准确率高

CVE-2023-23752MEDIUMbajo ataque09 mar 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC★ 4

Open Web Analytics 1.7.3 - Remote Code Execution

CVE-2022-24637—09 mar 2023

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh

60RIESGO

abrir ↗

GitHub PoC★ 7

Bulk scanner + get config from CVE-2023-23752

CVE-2023-23752MEDIUMbajo ataque09 mar 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC

sei-fish/CVE-2021-22205

CVE-2021-22205CRITICALbajo ataqueransomware09 mar 2023

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RIESGO

abrir ↗

GitHub PoC★ 135

Windows LPE exploit for CVE-2022-37969

CVE-2022-37969HIGHbajo ataque09 mar 2023

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RIESGO

abrir ↗

GitHub PoC

Results of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar

CVE-2023-21716CRITICAL08 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 59

A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as an email attachment (or other means).

CVE-2023-21716CRITICAL08 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC

rahmadsandy/EXIM-4.87-CVE-2019-10149

CVE-2019-10149CRITICALbajo ataque07 mar 2023

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RIESGO

abrir ↗

GitHub PoC★ 46

RTF Crash POC Python 3.11 Windows 10

CVE-2023-21716CRITICAL07 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 4

FeatherStark/CVE-2023-21716

CVE-2023-21716CRITICAL07 mar 2023

Microsoft Word Remote Code Execution Vulnerability

70RIESGO

abrir ↗

GitHub PoC★ 8

spring cloud function 一键利用工具! by charis 博客https://charis3306.top/

CVE-2022-22963CRITICALbajo ataque07 mar 2023

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RIESGO

abrir ↗

GitHub PoC

adriyansyah-mf/CVE-2023-23752

CVE-2023-23752MEDIUMbajo ataque07 mar 2023

[20230201] - Core - Improper access check in webservice endpoints

100RIESGO

abrir ↗

GitHub PoC

Script in Ruby for the CVE-2022-35914 - RCE in GLPI

CVE-2022-35914CRITICALbajo ataque07 mar 2023

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RIESGO

abrir ↗

GitHub PoC★ 1

Pada bulan maret 2023, terdapat sample baru yang terindentifikasi sebagai malware. Malware tersebut berasal dari file berekstensi.xls dan .doc dan dikenal dengan nama “Bank Slip.xls”. Aktivitas malware tersebut memiliki hubungan dengan kerentanan yang dikenal dengan id CVE-2017-11882 dan CVE-2018-0802.

CVE-2017-11882HIGHbajo ataqueransomware06 mar 2023

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2018-0802HIGHbajo ataque06 mar 2023

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow

93RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-31814

CVE-2022-31814CRITICAL05 mar 2023

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.