Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados

34.679CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.758 exploits

GitHub PoC★ 1

CVE-2017-11882复现

CVE-2017-11882HIGHbajo ataqueransomware15 ago 2022

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

abrir ↗

GitHub PoC

huahuatzt/CVE-2022-27925

CVE-2022-27925HIGHbajo ataqueransomware15 ago 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2011-0104复现

CVE-2011-0104—15 ago 2022

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow re

35RIESGO

abrir ↗

GitHub PoC

RakhithJK/CVE-2022-30333

CVE-2022-30333HIGHbajo ataqueransomware15 ago 2022

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RIESGO

abrir ↗

GitHub PoC

CVE-2013-2028复现

CVE-2013-2028—15 ago 2022

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau

60RIESGO

abrir ↗

GitHub PoC★ 2

ApacheOfBiz 17.12.01 - Unauthorized Remote Code Executión

CVE-2020-9496—15 ago 2022

XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

60RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2010-3333复现

CVE-2010-3333HIGHbajo ataque15 ago 2022

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2

100RIESGO

abrir ↗

GitHub PoC

Geni0r/cve-2021-4034-poc

CVE-2021-4034HIGHbajo ataque14 ago 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2022-33891 Exploit For Apache Spark

CVE-2022-33891HIGHbajo ataque13 ago 2022

Apache Spark shell command injection vulnerability via Spark UI

100RIESGO

abrir ↗

GitHub PoC

amit-pathak009/CVE-2022-22954-PoC

CVE-2022-22954CRITICALbajo ataqueransomware13 ago 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC

amit-pathak009/CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware13 ago 2022

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

GitHub PoC

amit-pathak009/CVE-2022-29464

CVE-2022-29464CRITICALbajo ataqueransomware13 ago 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 1

amit-pathak009/CVE-2022-29464-mass

CVE-2022-29464CRITICALbajo ataqueransomware13 ago 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RIESGO

abrir ↗

GitHub PoC★ 3

Modified dirtypipe script into auto root without have to search a file manually to hijack suid binary.

CVE-2022-0847HIGHbajo ataque13 ago 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 65

Zimbra RCE simple poc

CVE-2022-27925HIGHbajo ataqueransomware12 ago 2022

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RIESGO

abrir ↗

GitHub PoC

Silencecyber/cve-2021-4034

CVE-2021-4034HIGHbajo ataque11 ago 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 115

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.

CVE-2022-36446—11 ago 2022

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

60RIESGO

abrir ↗

GitHub PoC★ 25

Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101)

CVE-2022-31101HIGH09 ago 2022

SQL Injection in prestashop/blockwishlist

61RIESGO

abrir ↗

GitHub PoC★ 4

PoC for GLPI CVE-2022-31061

CVE-2022-31061CRITICAL09 ago 2022

SQL injection on login page in GLPI

60RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2021-4034.

CVE-2021-4034HIGHbajo ataque08 ago 2022

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RIESGO

abrir ↗

GitHub PoC★ 1

vesperp/CVE-2021-20038-SonicWall-RCE

CVE-2021-20038CRITICALbajo ataqueransomware08 ago 2022

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows

100RIESGO

abrir ↗

GitHub PoC

CVE-2007-2447 exploit written in python to get reverse shell

CVE-2007-2447—07 ago 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC

PHPMailer < 5.2.18 Remote Code Execution

CVE-2016-10033CRITICALbajo ataque05 ago 2022

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RIESGO

abrir ↗

GitHub PoC★ 6

Webkit (Safari) - Exploit

CVE-2022-22620HIGHbajo ataque04 ago 2022

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS

76RIESGO

abrir ↗

GitHub PoC

aweiiy/CVE-2021-43617

CVE-2021-43617—03 ago 2022

Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Val

28RIESGO

abrir ↗

GitHub PoC★ 169

海康威视RCE漏洞批量检测和利用工具

CVE-2021-36260CRITICALbajo ataque03 ago 2022

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,

100RIESGO

abrir ↗

GitHub PoC★ 3

LY613313/CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque03 ago 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC★ 5

Exploit to capitalize on vulnerability CVE-2020-2038.

CVE-2020-2038HIGH03 ago 2022

PAN-OS: OS command injection vulnerability in the management web interface

78RIESGO

abrir ↗

GitHub PoC

This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP 59777 port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the vulnerability. Download the PDF and enjoy !!! Cheers !!!

CVE-2019-6447—02 ago 2022

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

GitHub PoC

Apache Log4j is a logging tool written in Java. This paper focuses on what is Log4j and log4shell vulnerability and how it works, how it affects the victim, and how can this be mitigated

CVE-2021-44228CRITICALbajo ataqueransomware02 ago 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.