Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

86.991 exploits

Exploit-DB

SaltOS Erp Crm 3.1 r8126 - Database File Download

CVE-2018-18762—webappsphp29 oct 2018

SaltOS 3.1 r8126 contains a database download vulnerability.

23RIESGO

abrir ↗

GitHub PoC★ 4

Exploit for vulnerability CVE-2018-6389 on wordpress sites

CVE-2018-6389—28 oct 2018

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the

45RIESGO

abrir ↗

GitHub PoC★ 17

OpenBsd_CVE-2018-14665

CVE-2018-14665—27 oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2018-14665—27 oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

WebExec - (Authenticated) User Code Execution (Metasploit)

CVE-2018-15442HIGHremotewindows25 oct 2018

Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

61RIESGO

abrir ↗

Exploit-DB

Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)

CVE-2018-3245—remotemultiple25 oct 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

45RIESGO

abrir ↗

Metasploit400

Xorg X11 Server SUID logfile Privilege Escalation

CVE-2018-14665—25 oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RIESGO

abrir ↗

GitHub PoC

ensimag-security/CVE-2018-10933

CVE-2018-10933CRITICAL25 oct 2018

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

Metasploit500

Xorg X11 Server Local Privilege Escalation

CVE-2018-14665—25 oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RIESGO

abrir ↗

Metasploit400

Xorg X11 Server SUID modulepath Privilege Escalation

CVE-2018-14665—25 oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

libtiff 4.0.9 - Decodes Arbitrarily Sized JBIG into a Target Buffer

CVE-2018-18557—doslinux25 oct 2018

LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3

28RIESGO

abrir ↗

Exploit-DB

Adult Filter 1.0 - Buffer Overflow (SEH)

CVE-2018-19459—localwindows_x8625 oct 2018

Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file.

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

WebEx - Local Service Permissions Exploit (Metasploit)

CVE-2018-15442HIGHlocalwindows25 oct 2018

Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

61RIESGO

abrir ↗

GitHub PoC★ 14

CVE-2018-3245

CVE-2018-3245—25 oct 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

45RIESGO

abrir ↗

Exploit-DB

Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)

CVE-2018-2628CRITICALbajo ataqueremotemultiple25 oct 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

Exploit-DB

ProjeQtOr Project Management Tool 7.2.5 - Remote Code Execution

CVE-2018-18924—webappsphp25 oct 2018

The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file

23RIESGO

abrir ↗

Exploit-DB

Ekushey Project Manager CRM 3.1 - Cross-Site Scripting

CVE-2018-18417—webappsphp25 oct 2018

In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as d

23RIESGO

abrir ↗

Exploit-DB

User Management 1.1 - Cross-Site Scripting

CVE-2018-18419—webappsphp25 oct 2018

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filen

23RIESGO

abrir ↗

Exploit-DB

xorg-x11-server < 1.20.3 - Local Privilege Escalation

CVE-2018-14665—localmultiple25 oct 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RIESGO

abrir ↗

Exploit-DB

AjentiCP 1.2.23.13 - Cross-Site Scripting

CVE-2018-18548—webappsphp25 oct 2018

ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in Fi

23RIESGO

abrir ↗

GitHub PoC★ 1

A libssh CVE-2018-10933 scanner written in rust

CVE-2018-10933CRITICAL24 oct 2018

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

GitHub PoC

throwawayaccount12312312/precompiled-CVE-2018-10933

CVE-2018-10933CRITICAL24 oct 2018

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

GitHub PoC

Multi-threaded, reliable scanner for CVE-2018-10933.

CVE-2018-10933CRITICAL24 oct 2018

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

GitHub PoC★ 7

TALOS-2018-0684/cve-2018-4013 poc

CVE-2018-4013CRITICAL24 oct 2018

An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server l

48RIESGO

abrir ↗

Exploit-DB

LANGO Codeigniter Multilingual Script 1.0 - Cross-Site Scripting

CVE-2018-18416—webappsphp24 oct 2018

LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name par

23RIESGO

abrir ↗

Metasploit0

WebExec Authenticated User Code Execution

CVE-2018-15442HIGH24 oct 2018

Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

61RIESGO

abrir ↗

GitHub PoC★ 63

A weaponized version of CVE-2018-9206

CVE-2018-9206—24 oct 2018

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

60RIESGO

abrir ↗

GitHub PoC★ 172

CVE-2018-3245-PoC

CVE-2018-3245—24 oct 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

45RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-9206—24 oct 2018

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

60RIESGO

abrir ↗

Exploit-DB

Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Error_desc' Cross-Site Scripting

CVE-2018-18437—webappsaspx24 oct 2018

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc paramete

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.