Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientespopularesriesgo
4358 exploits
Nucleicritical
XStream < 1.4.16 - Remote Code Execution
CVE-2021-21345MEDIUM
XStream is vulnerable to a Remote Command Execution attack
50RIESGO
abrir ↗
Nucleicritical
Oracle WebLogic Server - Remote Code Execution
CVE-2021-2135CRITICAL
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Suppor
43RIESGO
abrir ↗
Nucleicritical
XStream <1.4.16 - Remote Code Execution
CVE-2021-21351MEDIUM
XStream is vulnerable to an Arbitrary Code Execution attack
50RIESGO
abrir ↗
Nucleihigh
BuddyPress REST API <7.2.1 - Privilege Escalation/Remote Code Execution
CVE-2021-21389HIGH
BuddyPress privilege escalation via REST API
61RIESGO
abrir ↗
Nucleimedium
Jellyfin <10.7.0 - Local File Inclusion
CVE-2021-21402HIGH
Unauthenticated Arbitrary File Access in Jellyfin
78RIESGO
abrir ↗
Nucleicritical
SCIMono <0.0.19 - Remote Code Execution
CVE-2021-21479HIGH
In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availabi
41RIESGO
abrir ↗
Nucleimedium
ZTE MF971R - Referer authentication bypass
CVE-2021-21745—
ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use th
30RIESGO
abrir ↗
Nucleimedium
Advantech R-SeeNet 2.4.12 - Cross-Site Scripting
CVE-2021-21799CRITICAL
Cross-site scripting vulnerabilities exist in the telnet_form.php script functionality of Advantech R-SeeNet v 2.4.12 (2
48RIESGO
abrir ↗
Nucleimedium
Advantech R-SeeNet 2.4.12 - Cross-Site Scripting
CVE-2021-21800CRITICAL
Cross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.1
48RIESGO
abrir ↗
Nucleimedium
Advantech R-SeeNet - Cross-Site Scripting
CVE-2021-21801CRITICAL
This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application
55RIESGO
abrir ↗
Nucleimedium
Advantech R-SeeNet - Cross-Site Scripting
CVE-2021-21802CRITICAL
This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application
43RIESGO
abrir ↗
Nucleimedium
Advantech R-SeeNet - Cross-Site Scripting
CVE-2021-21803CRITICAL
This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application
43RIESGO
abrir ↗
Nucleicritical
Advantech R-SeeNet 2.4.12 - OS Command Injection
CVE-2021-21805CRITICAL
An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.
55RIESGO
abrir ↗
Nucleimedium
D-Link DIR-3040 1.13B03 - Information Disclosure
CVE-2021-21816MEDIUM
An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially craft
40RIESGO
abrir ↗
Nucleicritical
Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command Injection
CVE-2021-21881CRITICAL
An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix Prem
55RIESGO
abrir ↗
Nucleicritical
VMware vSphere Client (HTML5) - Remote Code Execution
CVE-2021-21972CRITICALbajo ataqueransomware
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
Nucleimedium
VMware vSphere - Server-Side Request Forgery
CVE-2021-21973MEDIUMbajo ataque
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of UR
100RIESGO
abrir ↗
Nucleihigh
vRealize Operations Manager API - Server-Side Request Forgery
CVE-2021-21975HIGHbajo ataqueransomware
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor
100RIESGO
abrir ↗
Nucleicritical
VMware View Planner <4.6 SP1- Remote Code Execution
CVE-2021-21978—
VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input val
60RIESGO
abrir ↗
Nucleicritical
VMware vSphere Client (HTML5) - Remote Code Execution
CVE-2021-21985CRITICALbajo ataqueransomware
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RIESGO
abrir ↗
Nucleicritical
VMware vCenter Server - Arbitrary File Upload
CVE-2021-22005CRITICALbajo ataqueransomware
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw
100RIESGO
abrir ↗
Nucleimedium
vCenter Server - Improper Access Control
CVE-2021-22017MEDIUMbajo ataque
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A mali
70RIESGO
abrir ↗
Nucleihigh
Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution
CVE-2021-22053—
Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to exe
23RIESGO
abrir ↗
Nucleihigh
VMWare Workspace ONE UEM - Server-Side Request Forgery
CVE-2021-22054HIGHbajo ataque
VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and
100RIESGO
abrir ↗
Nucleimedium
FortiWeb - Cross Site Scripting
CVE-2021-22122—
An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version
23RIESGO
abrir ↗
Nucleimedium
Elasticsearch 7.10.0-7.13.3 - Information Disclosure
CVE-2021-22145—
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the abil
60RIESGO
abrir ↗
Nucleihigh
GitLab CI Lint API - Server-Side Request Forgery
CVE-2021-22175MEDIUMbajo ataque
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab af
70RIESGO
abrir ↗
Nucleicritical
GitLab CE/EE - Remote Code Execution
CVE-2021-22205CRITICALbajo ataqueransomware
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati
100RIESGO
abrir ↗
Nucleihigh
Gitlab CE/EE 10.5 - Server-Side Request Forgery
CVE-2021-22214MEDIUM
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE
53RIESGO
abrir ↗
Nucleicritical
Micro Focus Operations Bridge Reporter - Remote Code Execution
CVE-2021-22502CRITICALbajo ataque
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The
100RIESGO
abrir ↗
← anteriorpágina 44 / 146siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.