Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
84.035exploits catalogados
39.531CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientespopularesriesgo
3524 exploits
Metasploit300
Cisco IOS HTTP GET /%% Request Denial of Service
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a deni
50RIESGO
abrir ↗Metasploit400
UoW IMAP Server LSUB Buffer Overflow
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via
50RIESGO
abrir ↗Metasploit600
RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password tha
60RIESGO
abrir ↗Metasploit600
RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary command
50RIESGO
abrir ↗Metasploit300
ARP Spoof
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denia
23RIESGO
abrir ↗Metasploit600
Matt Wright guestbook.pl Arbitrary Command Execution
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remo
60RIESGO
abrir ↗Metasploit600
Windows Management Instrumentation (WMI) Remote Command Execution
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RIESGO
abrir ↗Metasploit600
Powershell Remoting Remote Command Execution
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RIESGO
abrir ↗Metasploit0
SSH User Code Execution
A Unix account has a default, null, blank, or missing password.
50RIESGO
abrir ↗Metasploit600
PsExec via Current User Token
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RIESGO
abrir ↗Metasploit0
Microsoft Windows Authenticated User Code Execution
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RIESGO
abrir ↗Metasploit600
MS99-025 Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x expose
60RIESGO
abrir ↗Metasploit200
War-FTPD 1.65 Username Overflow
Buffer overflow in War FTP allows remote execution of commands.
60RIESGO
abrir ↗Metasploit200
War-FTPD 1.65 Password Overflow
Buffer overflow in War FTP allows remote execution of commands.
60RIESGO
abrir ↗Metasploit300
X11 Keylogger
An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.
23RIESGO
abrir ↗Metasploit300
Chargen Probe Utility
Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or U
23RIESGO
abrir ↗Metasploit600
Solaris ypupdated Command Execution
The SunView (SunTools) selection_svc facility allows remote users to read files.
50RIESGO
abrir ↗Metasploit300
Samba read_nttrans_ea_list Integer Overflow
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.
50RIESGO
abrir ↗Metasploit300
Samba lsa_io_trans_names Heap Overflow
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RIESGO
abrir ↗Metasploit300
Samba lsa_io_privilege_set Heap Overflow
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RIESGO
abrir ↗Metasploit300
RPC DoS targeting *nix rpcbind/libtirpc
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider t
60RIESGO
abrir ↗Metasploit300
Multiple DVR Manufacturers Configuration Disclosure
Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Wel
60RIESGO
abrir ↗Metasploit300
Memcached Remote Denial of Service
Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin
23RIESGO
abrir ↗Metasploit300
EasyCafe Server Remote File Access
EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43
36RIESGO
abrir ↗Metasploit300
ws - Denial of Service
ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date
18RIESGO
abrir ↗Metasploit300
WordPress Traversal Directory DoS
Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.
43RIESGO
abrir ↗Metasploit300
WinRM Login Utility
A Unix account has a default, null, blank, or missing password.
50RIESGO
abrir ↗Metasploit300
ua-parser-js npm module ReDoS
ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial o
18RIESGO
abrir ↗Metasploit300
Tautulli v2.1.9 - Shutdown Denial of Service
In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous a
23RIESGO
abrir ↗Metasploit300
MS15-034 HTTP Protocol Stack Request Handling Denial-of-Service
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.