Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.035exploits catalogados

39.531CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientes populares riesgo

3524 exploits

Metasploit300

Joomla Bruteforce Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

abrir ↗

Metasploit300

Jenkins-CI Unauthenticated Script-Console Scanner

CVE-2015-8103—

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RIESGO

abrir ↗

Metasploit300

JBoss Vulnerability Scanner

CVE-2017-12149CRITICALbajo ataqueransomware

In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter

100RIESGO

abrir ↗

Metasploit300

JBoss Vulnerability Scanner

CVE-2010-1428MEDIUMbajo ataqueransomware

The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4

70RIESGO

abrir ↗

Metasploit300

JBoss Vulnerability Scanner

CVE-2010-0738LOWbajo ataqueransomware

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

95RIESGO

abrir ↗

Metasploit300

JBoss Vulnerability Scanner

CVE-2008-3273—

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remot

30RIESGO

abrir ↗

Metasploit300

JBoss Vulnerability Scanner

CVE-2010-1429—

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 a

30RIESGO

abrir ↗

Metasploit300

JBoss Status Servlet Information Gathering

CVE-2008-3273—

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remot

30RIESGO

abrir ↗

Metasploit300

JBoss Status Servlet Information Gathering

CVE-2010-1429—

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 a

30RIESGO

abrir ↗

Metasploit300

Microsoft IIS HTTP Internal IP Disclosure

CVE-2000-0649—

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page w

60RIESGO

abrir ↗

Metasploit300

Microsoft IIS HTTP Internal IP Disclosure

CVE-2002-0422—

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (whic

30RIESGO

abrir ↗

Metasploit300

Httpdasm Directory Traversal

CVE-2010-10012HIGH

httpdASM 0.92 Path Traversal

36RIESGO

abrir ↗

Metasploit300

HTTP Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

abrir ↗

Metasploit300

HP Intelligent Management SOM FileDownloadServlet Arbitrary Download

CVE-2013-4826—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Mod

30RIESGO

abrir ↗

Metasploit300

HP Intelligent Management ReportImgServlt Directory Traversal

CVE-2012-5203—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw

23RIESGO

abrir ↗

Metasploit300

HP Intelligent Management IctDownloadServlet Directory Traversal

CVE-2012-5204—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw

23RIESGO

abrir ↗

Metasploit300

HP Intelligent Management FaultDownloadServlet Directory Traversal

CVE-2012-5202—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw

23RIESGO

abrir ↗

Metasploit300

HP Intelligent Management BIMS DownloadServlet Directory Traversal

CVE-2013-4823—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Soft

30RIESGO

abrir ↗

Metasploit300

HTTP Host Header Injection Detection

CVE-2016-10073—

The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the emai

60RIESGO

abrir ↗

Metasploit300

Novell Groupwise Agents HTTP Directory Traversal

CVE-2012-0419—

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 be

30RIESGO

abrir ↗

Metasploit300

Embedthis GoAhead Embedded Web Server Directory Traversal

CVE-2014-9707—

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remot

23RIESGO

abrir ↗

Metasploit300

GlassFish Brute Force Utility

CVE-2011-0807—

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Applicati

50RIESGO

abrir ↗

Metasploit300

Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database

CVE-2017-5146—

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Vers

18RIESGO

abrir ↗

Metasploit300

FortiMail Unauthenticated Login Bypass Scanner

CVE-2020-9294—

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 an

40RIESGO

abrir ↗

Metasploit300

Cassandra Web File Read Vulnerability

CVE-2020-36939HIGH

Cassandra Web 0.5.0 - Remote File Read

36RIESGO

abrir ↗

Metasploit300

Binom3 Web Management Login Scanner, Config and Password File Dump

CVE-2017-5162—

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for rem

23RIESGO

abrir ↗

Metasploit300

Apache Axis2 Brute Force Utility

CVE-2010-0219—

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products

60RIESGO

abrir ↗

Metasploit300

Atlassian Crowd XML Entity Expansion Remote File Access

CVE-2012-2926—

Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible bef

50RIESGO

abrir ↗

Metasploit300

Apache "mod_userdir" User Enumeration

CVE-2001-1013—

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists a

50RIESGO

abrir ↗

Metasploit300

Apache ActiveMQ Directory Traversal

CVE-2010-1587—

The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP

60RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.