Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.743 exploits

GitHub PoC

CVE-2017-16995 Linux POC

CVE-2017-16995—09 ene 2023

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RIESGO

abrir ↗

GitHub PoC

CVE-2017-7308 POC

CVE-2017-7308—09 ene 2023

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer

43RIESGO

abrir ↗

GitHub PoC

zabbix saml bypass

CVE-2022-23131CRITICALbajo ataque09 ene 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

abrir ↗

GitHub PoC

Sophos EXploit

CVE-2022-1040CRITICALbajo ataque08 ene 2023

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2018-19321

CVE-2018-19321HIGHbajo ataqueransomware07 ene 2023

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, X

71RIESGO

abrir ↗

GitHub PoC★ 1

wr0x00/cve-2022-23131

CVE-2022-23131CRITICALbajo ataque07 ene 2023

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

100RIESGO

abrir ↗

GitHub PoC★ 11

Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.

CVE-2022-39073CRITICAL07 ene 2023

There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an att

48RIESGO

abrir ↗

GitHub PoC★ 26

Dell Driver EoP (CVE-2021-21551)

CVE-2021-21551HIGHbajo ataque07 ene 2023

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

98RIESGO

abrir ↗

GitHub PoC★ 37

CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224

CVE-2021-38003HIGHbajo ataque07 ene 2023

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo

83RIESGO

abrir ↗

GitHub PoC

POC Exploit for CVE-2022-44149

CVE-2022-44149HIGH06 ene 2023

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by

53RIESGO

abrir ↗

GitHub PoC★ 10

CVE-2022-44877 Centos Web Panel 7 Unauthenticated Remote Code Execution

CVE-2022-44877CRITICALbajo ataque06 ene 2023

100RIESGO

abrir ↗

GitHub PoC★ 103

numanturle/CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque05 ene 2023

100RIESGO

abrir ↗

GitHub PoC★ 5

Proof of concept for exploiting the Heartbeat Extension bug detailed in the CVE-2014-0160. :old_key: :unlock:

CVE-2014-0160HIGHbajo ataque05 ene 2023

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

abrir ↗

GitHub PoC★ 29

PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti <= 1.2.22

CVE-2022-46169CRITICALbajo ataque05 ene 2023

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC

ajith737/Dirty-Pipe-CVE-2022-0847-POCs

CVE-2022-0847HIGHbajo ataque04 ene 2023

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 1

Webmin < 1.290 / Usermin < 1.220 - Arbitrary file disclosure

CVE-2006-3392—04 ene 2023

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RIESGO

abrir ↗

GitHub PoC★ 12

Basic POC exploit for CVE-2022-46164

CVE-2022-46164CRITICAL04 ene 2023

Account takeover via prototype vulnerability

60RIESGO

abrir ↗

GitHub PoC

CVE-2021-4034 PoC

CVE-2021-4034HIGHbajo ataque04 ene 2023

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2018-16763 FuelCMS 1.4 Remote Code Execution, this version of FuelCMS is still vulnerable until now

CVE-2018-16763—03 ene 2023

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RIESGO

abrir ↗

GitHub PoC★ 1

Trinadh465/frameworks_minikin_AOSP10_r33-CVE-2022-20473

CVE-2022-20473CRITICAL03 ene 2023

In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

48RIESGO

abrir ↗

GitHub PoC

User friendly Spring4Shell POC

CVE-2022-22965CRITICALbajo ataque03 ene 2023

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RIESGO

abrir ↗

GitHub PoC

A Proof of Concept for the CVE-2021-46398 flaw exploitation

CVE-2021-46398—03 ene 2023

A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor use

23RIESGO

abrir ↗

GitHub PoC★ 3

Cacti Unauthenticated Command Injection

CVE-2022-46169CRITICALbajo ataque02 ene 2023

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC

ryan412/CVE-2022-48197

CVE-2022-48197—02 ene 2023

Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, Tree

38RIESGO

abrir ↗

GitHub PoC★ 3

Cacti Unauthenticated Command Injection

CVE-2022-46169CRITICALbajo ataque02 ene 2023

Unauthenticated Command Injection

100RIESGO

abrir ↗

GitHub PoC

Trinadh465/frameworks_minikin_AOSP10_r33_CVE-2022-20473

CVE-2022-20473CRITICAL02 ene 2023

In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This c

48RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2020-17382 Windows 10 x64 2004 Build 19041.264 Exploit

CVE-2020-17382—01 ene 2023

The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).

23RIESGO

abrir ↗

GitHub PoC

philippedixon/CVE-2018-15473

CVE-2018-15473MEDIUM01 ene 2023

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

abrir ↗

GitHub PoC

Exploit for CVE-2007-4560 (ClamAV Milter Sendmail 0.91.2 Remote Code Execution)

CVE-2007-4560—31 dic 2022

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command

60RIESGO

abrir ↗

GitHub PoC

sqsec/log4j2_CVE-2021-44228

CVE-2021-44228CRITICALbajo ataqueransomware30 dic 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.