Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.313exploits catalogados

34.834CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8484Nuclei 4237Metasploit 3467✓ solo verificadosrecientes populares riesgo

13.885 exploits

GitHub PoC★ 2

Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096

CVE-2022-1096HIGHbajo ataque29 mar 2022

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corrup

76RIESGO

abrir ↗

GitHub PoC★ 21

CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution

CVE-2019-9193—29 mar 2022

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RIESGO

abrir ↗

GitHub PoC★ 11

misterxid/watchguard_cve-2022-26318

CVE-2022-26318CRITICALbajo ataque28 mar 2022

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulner

100RIESGO

abrir ↗

GitHub PoC

chattopadhyaykittu/CVE-2017-0037

CVE-2017-0037HIGHbajo ataque28 mar 2022

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilde

93RIESGO

abrir ↗

GitHub PoC

Tankirat/CVE-2017-5638

CVE-2017-5638CRITICALbajo ataqueransomware28 mar 2022

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

abrir ↗

GitHub PoC

Description of Exploit SMBGhost CVE-2020-0796

CVE-2020-0796CRITICALbajo ataqueransomware28 mar 2022

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC★ 354

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

CVE-2022-22963CRITICALbajo ataque26 mar 2022

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is po

100RIESGO

abrir ↗

GitHub PoC

tzwlhack/CVE-2018-20250

CVE-2018-20250HIGHbajo ataqueransomware25 mar 2022

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RIESGO

abrir ↗

GitHub PoC

spasm5/CVE-2018-12326

CVE-2018-12326—25 mar 2022

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution

23RIESGO

abrir ↗

GitHub PoC★ 2

Android Ransomware Development - AES256 encryption + CVE-2019-2215 (reverse root shell) + Data Exfiltration

CVE-2019-2215HIGHbajo ataque25 mar 2022

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RIESGO

abrir ↗

GitHub PoC★ 1

poc for CVE-2022-22947

CVE-2022-22947CRITICALbajo ataque25 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

A quick python exploit for the Nostromo 1.9.6 remote code execution vulnerability. Only takes in host and port of web server as required arguments.

CVE-2019-16278CRITICALbajo ataque24 mar 2022

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RIESGO

abrir ↗

GitHub PoC★ 1

This is a exploit code for CVE-2020-8163

CVE-2020-8163—24 mar 2022

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the

60RIESGO

abrir ↗

GitHub PoC

XSS via Host Header injection and Steal Password Reset Token of another user

CVE-2022-24181—22 mar 2022

Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to

38RIESGO

abrir ↗

GitHub PoC★ 2

Dirty Pipe - CVE-2022-0847

CVE-2022-0847HIGHbajo ataque22 mar 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 1

SivaPriyaRanganatha/CVE-2020-6418

CVE-2020-6418HIGHbajo ataque21 mar 2022

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corru

100RIESGO

abrir ↗

GitHub PoC★ 18

Enokiy/cve-2022-22947-spring-cloud-gateway

CVE-2022-22947CRITICALbajo ataque21 mar 2022

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe

100RIESGO

abrir ↗

GitHub PoC

Anonymous-Family/CVE-2015-1701-download

CVE-2015-1701HIGHbajo ataqueransomware21 mar 2022

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RIESGO

abrir ↗

GitHub PoC

Unspecified vulnerability in Microsoft Windows before 8 allows local users to gain privileges via unknown vectors, as exploited in the wild in April 2015 (Base Score: 7.2 HIGH) Current Description Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability

CVE-2015-1701HIGHbajo ataqueransomware21 mar 2022

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RIESGO

abrir ↗

GitHub PoC

LTiDi2000/CVE-2020-2551

CVE-2020-2551CRITICALbajo ataque21 mar 2022

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RIESGO

abrir ↗

GitHub PoC★ 9

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

CVE-2022-24112CRITICALbajo ataque20 mar 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header

100RIESGO

abrir ↗

GitHub PoC★ 38

CVE-2022-24990信息泄露+RCE 一条龙

CVE-2022-24990CRITICALbajo ataqueransomware20 mar 2022

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

100RIESGO

abrir ↗

GitHub PoC

TheJoyOfHacking/saleemrashid-sudo-cve-2019-18634

CVE-2019-18634—20 mar 2022

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RIESGO

abrir ↗

GitHub PoC★ 3

RCE exploit for PHP Unit 5.6.2

CVE-2017-9841CRITICALbajo ataque20 mar 2022

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RIESGO

abrir ↗

GitHub PoC★ 12

CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation

CVE-2022-24990CRITICALbajo ataqueransomware20 mar 2022

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

100RIESGO

abrir ↗

GitHub PoC★ 4

pwncat module that automatically exploits CVE-2022-0847 (dirtypipe)

CVE-2022-0847HIGHbajo ataque20 mar 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC

PoC for Dirty COW (CVE-2016-5195)

CVE-2016-5195HIGHbajo ataque19 mar 2022

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC★ 10

Hacked up Dirty Pipe (CVE-2022-0847) PoC that hijacks a SUID binary to spawn a root shell. (and attempts to restore the damaged binary as well)

CVE-2022-0847HIGHbajo ataque18 mar 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RIESGO

abrir ↗

GitHub PoC★ 1

tzwlhack/CVE-2017-11882

CVE-2017-11882HIGHbajo ataqueransomware18 mar 2022

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2021-3156

CVE-2021-3156HIGHbajo ataque18 mar 2022

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.