Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

72.018exploits catalogados

32.219CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8195Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

3463 exploits

Metasploit300

Cambium ePMP 1000 SNMP Enumeration

CVE-2017-7918—

An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration

18RIESGO

Metasploit300

Cambium cnPilot r200/r201 SNMP Enumeration

CVE-2017-5262—

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access

18RIESGO

Metasploit300

Arris DG950A Cable Modem Wifi Enumeration

CVE-2014-4863—

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote atta

23RIESGO

Metasploit300

SMTP Open Relay Detection

CVE-1999-0512—

A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.

23RIESGO

Metasploit300

SMTP User Enumeration Utility

CVE-1999-0531—

15RIESGO

Metasploit300

Samba _netr_ServerPasswordSet Uninitialized Credential State

CVE-2015-0240—

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1

60RIESGO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0144HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0148HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0143HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0146HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0145HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0147HIGHbajo ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Metasploit300

SMB Login Check Scanner

CVE-1999-0506—

A Windows NT domain user or administrator account has a default, null, blank, or missing password.

23RIESGO

Metasploit300

SMB Group Policy Preference Saved Passwords Enumeration

CVE-2014-1812HIGHbajo ataqueransomware

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

98RIESGO

Metasploit300

Microsoft Windows Authenticated Logged In Users Enumeration

CVE-1999-0504—

A Windows NT local user or administrator account has a default, null, blank, or missing password.

50RIESGO

Metasploit300

Sielco Sistemi Winlog Remote File Access

CVE-2012-4356—

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA bef

43RIESGO

Metasploit300

Moxa UDP Device Discovery

CVE-2016-9361CRITICAL

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 52

48RIESGO

Metasploit300

Indusoft WebStudio NTWebServer Remote File Access

CVE-2011-1900—

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote att

30RIESGO

Metasploit300

SAP /sap/bc/soap/rfc SOAP Service RFC_SYSTEM_INFO Function Sensitive Information Gathering

CVE-2006-6010—

SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an

23RIESGO

Metasploit300

SAP URL Scanner

CVE-2010-0738MEDIUMbajo ataqueransomware

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

100RIESGO

Metasploit300

SAP Host Agent Information Disclosure

CVE-2013-3319—

The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitiv

23RIESGO

Metasploit300

rsh Authentication Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

Metasploit300

rsh Authentication Scanner

CVE-1999-0651—

The rsh/rlogin service is running.

23RIESGO

Metasploit300

rlogin Authentication Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

Metasploit300

rlogin Authentication Scanner

CVE-1999-0651—

The rsh/rlogin service is running.

23RIESGO

Metasploit300

rexec Authentication Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

Metasploit300

rexec Authentication Scanner

CVE-1999-0651—

The rsh/rlogin service is running.

23RIESGO

Metasploit300

MS12-020 Microsoft Remote Desktop Checker

CVE-2012-0002—

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V

60RIESGO

Metasploit300

PostgreSQL Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

Metasploit300

PostgreSQL Database Name Command Line Flag Injection

CVE-2013-1899—

Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows re

30RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.