Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

86.991 exploits

GitHub PoC

Bash implementation of CVE-2014-5284

CVE-2014-5284—02 ene 2019

host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, whi

23RIESGO

abrir ↗

Exploit-DB

Frog CMS 0.9.5 - Cross-Site Scripting

CVE-2018-20448—webappsphp02 ene 2019

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

WebKit JSC - 'AbstractValue::set' Use-After-Free

CVE-2018-4443—dosmultiple02 ene 2019

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1,

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

WebKit JSC - 'JSArray::shiftCountWithArrayStorage' Out-of-Bounds Read/Write

CVE-2018-4441—dosmultiple02 ene 2019

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1,

28RIESGO

abrir ↗

Metasploit0

Docker Container Escape Via runC Overwrite

CVE-2019-5736—01 ene 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RIESGO

abrir ↗

GitHub PoC

some works on CVE-2018-19518

CVE-2018-19518—31 dic 2018

University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh c

60RIESGO

abrir ↗

GitHub PoC★ 1

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

CVE-2008-0166—31 dic 2018

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RIESGO

abrir ↗

Exploit-DB

VMware Workstation/Player < 12.5.5 - Local Privilege Escalation

CVE-2017-4915—localmultiple30 dic 2018

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fil

38RIESGO

abrir ↗

GitHub PoC

Simple exploit for Easy RM to MP3 Converter 2.7.3.700 on Windows 7 32b.

CVE-2009-1330—30 dic 2018

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RIESGO

abrir ↗

Exploit-DB

Linux Kernel < 4.4.0/ < 4.8.0 (Ubuntu 14.04/16.04 / Linux Mint 17/18 / Zorin) - Local Privilege Escalation (KASLR / SMEP)

CVE-2017-1000112—locallinux29 dic 2018

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE

43RIESGO

abrir ↗

Exploit-DB

Linux Kernel 4.4.0-21 < 4.4.0-51 (Ubuntu 14.04/16.04 x64) - 'AF_PACKET' Race Condition Privilege Escalation

CVE-2016-8655—localwindows_x86-6429 dic 2018

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RIESGO

abrir ↗

Exploit-DB

Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation

CVE-2017-7308—locallinux29 dic 2018

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer

43RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2018-8581

CVE-2018-8581HIGHbajo ataqueransomware28 dic 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RIESGO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2018-8581HIGHbajo ataqueransomware28 dic 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-8581HIGHbajo ataqueransomware27 dic 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RIESGO

abrir ↗

Exploit-DB

Craft CMS 3.0.25 - Cross-Site Scripting

CVE-2018-20418—webappsphp27 dic 2018

index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

23RIESGO

abrir ↗

Exploit-DB

bludit Pages Editor 3.0.0 - Arbitrary File Upload

CVE-2018-1000811—webappsphp27 dic 2018

bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages

35RIESGO

abrir ↗

GitHub PoC★ 331

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2018-8581HIGHbajo ataqueransomware27 dic 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RIESGO

abrir ↗

Exploit-DB

WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin)

CVE-2018-19138—webappsphp24 dic 2018

WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.

23RIESGO

abrir ↗

Exploit-DB

Adobe Flash ActiveX Plugin 28.0.0.137 - Remote Code Execution (PoC)

CVE-2018-15982HIGHbajo ataqueransomwarelocalwindows24 dic 2018

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful

93RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Netatalk 3.1.12 - Authentication Bypass

CVE-2018-1160CRITICALremotemultiple21 dic 2018

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Netatalk 3.1.12 - Authentication Bypass (PoC)

CVE-2018-1160CRITICALdosmultiple21 dic 2018

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking

70RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

VBScript - VbsErase Reference Leak Use-After-Free

CVE-2018-8625—doswindows20 dic 2018

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

35RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2017-10271HIGHbajo ataqueransomware20 dic 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

VBScript - MSXML Execution Policy Bypass

CVE-2018-8619—doswindows20 dic 2018

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly rest

35RIESGO

abrir ↗

GitHub PoC

Weblogic(CVE-2017-10271)

CVE-2017-10271HIGHbajo ataqueransomware20 dic 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RIESGO

abrir ↗

GitHub PoC★ 5

Flash 2018-15982 UAF

CVE-2018-15982HIGHbajo ataqueransomware20 dic 2018

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful

93RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2015-9251—20 dic 2018

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed wi

28RIESGO

abrir ↗

GitHub PoC

CVE-2007-1567 - WarFTP 1.65 'USER' Remote Buffer Overflow Vulnerability. Tested on Windows XP Professional SP3.

CVE-2007-1567—19 dic 2018

Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of s

35RIESGO

abrir ↗

Exploit-DB

Integria IMS 5.0.83 - 'search_string' Cross-Site Scripting

CVE-2018-19828—webappsphp19 dic 2018

Artica Integria IMS 5.0.83 has XSS via the search_string parameter.

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.