Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
76.496exploits catalogados
34.964CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8510Nuclei 4239Metasploit 3468✓ solo verificadosrecientespopularesriesgo
13.937 exploits
GitHub PoC★ 9
zer0yu/CVE-2021-41277
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RIESGO
abrir ↗GitHub PoC★ 18
CVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)
Windows Print Spooler Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC★ 8
Microsoft Exchange ProxyLogon PoC (CVE-2021-26855)
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC★ 1
a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit.
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RIESGO
abrir ↗GitHub PoC
sinisterghost/https-github.com-iBearcat-CVE-2018-8174_EXP
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RIESGO
abrir ↗GitHub PoC
MaximeSchlegel/CVE-2021-32724-Target
check-spelling workflow vulnerable to GITHUB_TOKEN leakage via symlink attack
48RIESGO
abrir ↗GitHub PoC★ 1
CVE-2021-42325 POC
Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.
28RIESGO
abrir ↗GitHub PoC
A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RIESGO
abrir ↗GitHub PoC
dearpan/cve-2018-9995
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RIESGO
abrir ↗GitHub PoC★ 5
Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s)
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS
76RIESGO
abrir ↗GitHub PoC
Strapi Framework, 3.0.0-beta.17.4
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c
35RIESGO
abrir ↗GitHub PoC★ 1
NSE script to fingerprint if GitLab is vulnerable to cve-2021-22205-nse
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RIESGO
abrir ↗GitHub PoC★ 2
Proof of concept for CVE-2020-7247 for educational purposes.
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to
100RIESGO
abrir ↗GitHub PoC
Detect with python and tracking IP
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RIESGO
abrir ↗GitHub PoC
lisinan988/CVE-2018-8174-exp
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RIESGO
abrir ↗GitHub PoC
lisinan988/CVE-2019-0708-scan
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗GitHub PoC
lisinan988/CVE-2020-0796-exp
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗GitHub PoC★ 3
A CVE-2021-22205 Gitlab RCE POC written in Golang
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RIESGO
abrir ↗GitHub PoC
lisinan988/CVE-2017-11882-exp
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RIESGO
abrir ↗GitHub PoC
lisinan988/CVE-2021-40444-exp
Microsoft MSHTML Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC
Metabase GeoJSON map local file inclusion
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RIESGO
abrir ↗GitHub PoC
plugin made for LeakiX
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RIESGO
abrir ↗GitHub PoC★ 4
Vulnmachines/Metabase_CVE-2021-41277
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RIESGO
abrir ↗GitHub PoC★ 83
Microsoft Exchange Server Poc
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC
Python 3 script to identify CVE-2021-26084 via network requests.
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RIESGO
abrir ↗GitHub PoC★ 2
CrackerCat/CVE-2021-26411
Internet Explorer Memory Corruption Vulnerability
93RIESGO
abrir ↗GitHub PoC★ 17
对Exchange Proxyshell 做了二次修改，精确的拆分、实现辅助性安全测试。
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗GitHub PoC★ 5
simple program for exploit metabase
GeoJSON URL validation can expose server files and environment variables to unauthorized users
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.