Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados

34.679CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.812 exploits

GitHub PoC★ 12

Atlassian confluence unauthenticated ONGL injection remote code execution scanner (CVE-2022-26134).

CVE-2022-26134CRITICALbajo ataqueransomware08 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC

secjia/CVE-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware08 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 2

Exploit vulnerabilities and vulnerability prevention implementation

CVE-2017-8464HIGHbajo ataque08 jun 2022

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RIESGO

abrir ↗

GitHub PoC★ 1

Proof of concept of the Log4Shell vulnerability (CVE-2021-44228)

CVE-2021-44228CRITICALbajo ataqueransomware08 jun 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 38

Proof of Concept of CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware08 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 3

批量检测Spring Cloud Gateway 远程代码执行漏洞 Spring_Cloud_Gateway_RCE_POC-CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque08 jun 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

sentrium-security/Follina-Workaround-CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware08 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 4

Server to host/activate Follina payloads & generator of malicious Word documents exploiting the MS-MSDT protocol. (CVE-2022-30190)

CVE-2022-30190HIGHbajo ataqueransomware07 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC

Notes related to CVE-2022-30190

CVE-2022-30190HIGHbajo ataqueransomware07 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 1

Microsoft Support Diagnostic Tool (CVE-2022-30190)

CVE-2022-30190HIGHbajo ataqueransomware07 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 235

Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)

CVE-2022-30075—07 jun 2022

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

35RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2020-0796 explanation and researching vulnerability for term porject CENG325

CVE-2020-0796CRITICALbajo ataqueransomware07 jun 2022

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2022-26134 Confluence OGNL Injection POC

CVE-2022-26134CRITICALbajo ataqueransomware07 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 4

Y000o/Confluence-CVE-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware07 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 1

This project files demostrate a proof-of-concept of log4j vulnerability (CVE-2021-44228) on AWS using Terraform Infrastructure-as-a-code means.

CVE-2021-44228CRITICALbajo ataqueransomware07 jun 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

GitHub PoC★ 1

Atlassian Confluence- Unauthenticated OGNL injection vulnerability (RCE)

CVE-2022-26134CRITICALbajo ataqueransomware07 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…

CVE-2021-26855CRITICALbajo ataqueransomware07 jun 2022

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2021-41773 | Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks

CVE-2021-41773HIGHbajo ataqueransomware07 jun 2022

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

GitHub PoC★ 13

Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection

CVE-2022-26134CRITICALbajo ataqueransomware07 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 340

BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL

CVE-2022-26134CRITICALbajo ataqueransomware07 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 1

Implementation of CVE-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware07 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 4

Atlassian Confluence 远程代码执行漏洞（CVE-2022-26134）

CVE-2022-26134CRITICALbajo ataqueransomware07 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC

vesperp/CVE-2022-26134-Confluence

CVE-2022-26134CRITICALbajo ataqueransomware07 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 4

This repository talks about Zero-Day Exploitation of Atlassian Confluence, it's defense and analysis point of view from a SecOps or Blue Team perspective

CVE-2022-26134CRITICALbajo ataqueransomware06 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 20

Simple Honeypot for Atlassian Confluence (CVE-2022-26134)

CVE-2022-26134CRITICALbajo ataqueransomware06 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC

Exploit in Rails Development Mode. With some knowledge of a target application it is possible for an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.

CVE-2019-5420—06 jun 2022

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RIESGO

abrir ↗

GitHub PoC★ 1

Microsoft MS-MSDT Follina (0-day Vulnerability) CVE-2022-30190 Attack Vector

CVE-2022-30190HIGHbajo ataqueransomware06 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

GitHub PoC★ 44

Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)

CVE-2022-26134CRITICALbajo ataqueransomware06 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 3

Vulnmachines/Confluence-CVE-2022-26134

CVE-2022-26134CRITICALbajo ataqueransomware05 jun 2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RIESGO

abrir ↗

GitHub PoC★ 6

ItsNee/Follina-CVE-2022-30190-POC

CVE-2022-30190HIGHbajo ataqueransomware05 jun 2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.