Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.836exploits catalogados
32.133CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8156Nuclei 4201Metasploit 3462✓ solo verificadosrecientespopularesriesgo
22.786 exploits
Exploit-DB
Coship RT3052 Wireless Router - Persistent Cross-Site Scripting
CVE-2018-8772—20 mar 2018
Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen.
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows Kernel - 'nt!KiDispatchException' 64-bit Stack Memory Disclosure
CVE-2018-0897—20 mar 2018
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve
23RIESGO
abrir ↗
Exploit-DB
Intelbras Telefone IP TIP200 LITE - Local File Disclosure
CVE-2018-9010—20 mar 2018
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via t
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows - Desktop Bridge Virtual Registry NtLoadKey Arbitrary File Read/Write Privilege Escalation
CVE-2018-0882—20 mar 2018
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an el
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows - Desktop Bridge VFS Privilege Escalation
CVE-2018-0877—20 mar 2018
The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server,
23RIESGO
abrir ↗
Exploit-DB
Cisco node-jos < 0.11.0 - Re-sign Tokens
CVE-2018-0114—20 mar 2018
A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker
35RIESGO
abrir ↗
Exploit-DB
Microsoft Windows Kernel - 'nt!NtWaitForDebugEvent' 64-bit Stack Memory Disclosure
CVE-2018-0901—20 mar 2018
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows - Desktop Bridge Virtual Registry Arbitrary File Read/Write Privilege Escalation
CVE-2018-0880—20 mar 2018
The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an el
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows Kernel - 'NtQueryInformationThread(ThreadBasicInformation)' 64-bit Stack Memory Disclosure
CVE-2018-0895—20 mar 2018
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve
23RIESGO
abrir ↗
Exploit-DB
Internet Explorer - 'RegExp.lastMatch' Memory Disclosure
CVE-2018-0891—20 mar 2018
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT
28RIESGO
abrir ↗
Exploit-DB
Firefox 46.0.1 - ASM.JS JIT-Spray Remote Code Execution
CVE-2017-5375—16 mar 2018
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T
35RIESGO
abrir ↗
Exploit-DB
Unitrends UEB 10.0 - Root Remote Code Execution
CVE-2018-6328—16 mar 2018
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, w
50RIESGO
abrir ↗
Exploit-DB
Firefox 46.0.1 - ASM.JS JIT-Spray Remote Code Execution
CVE-2016-2819—16 mar 2018
Heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to ex
28RIESGO
abrir ↗
Exploit-DB
Firefox 44.0.2 - ASM.JS JIT-Spray Remote Code Execution
CVE-2017-5375—16 mar 2018
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T
35RIESGO
abrir ↗
Exploit-DB
Firefox 44.0.2 - ASM.JS JIT-Spray Remote Code Execution
CVE-2016-1960—16 mar 2018
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox
35RIESGO
abrir ↗
Exploit-DB
Linux Kernel < 4.4.0-116 (Ubuntu 16.04.4) - Local Privilege Escalation
CVE-2017-16995—16 mar 2018
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial
50RIESGO
abrir ↗
Exploit-DB
Unitrends UEB 10.0 - Root Remote Code Execution
CVE-2018-6329—16 mar 2018
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL i
50RIESGO
abrir ↗
Exploit-DB
Android DRM Services - Buffer Overflow
CVE-2017-13253—15 mar 2018
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Thi
23RIESGO
abrir ↗
Exploit-DB
WordPress Plugin Duplicator 1.2.32 - Cross-Site Scripting
CVE-2018-7543—15 mar 2018
Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for
23RIESGO
abrir ↗
Exploit-DB
Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution
CVE-2017-8046—15 mar 2018
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri
60RIESGO
abrir ↗
Exploit-DB
MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow
CVE-2018-7445CRITICALbajo ataque15 mar 2018
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remot
90RIESGO
abrir ↗
Exploit-DB
Microsoft Windows Kernel (7 x86) - Local Privilege Escalation (MS17-017)
CVE-2017-0101HIGHbajo ataqueransomware15 mar 2018
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7
83RIESGO
abrir ↗
Exploit-DB
SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution
CVE-2018-2380MEDIUMbajo ataqueransomware14 mar 2018
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information pr
68RIESGO
abrir ↗
Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
CVE-2018-7706—13 mar 2018
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbit
23RIESGO
abrir ↗
Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
CVE-2018-7704—13 mar 2018
SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1
23RIESGO
abrir ↗
Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
CVE-2018-7705—13 mar 2018
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mai
23RIESGO
abrir ↗
Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
CVE-2018-7702—13 mar 2018
SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e
28RIESGO
abrir ↗
Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
CVE-2018-7703—13 mar 2018
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB
Tuleap 9.17.99.189 - Blind SQL Injection
CVE-2018-7538—13 mar 2018
A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 a
23RIESGO
abrir ↗
Exploit-DB
SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities
CVE-2018-7701—13 mar 2018
Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers
23RIESGO
abrir ↗
← anteriorpágina 100 / 760siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.