Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

72.018exploits catalogados

32.219CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8195Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

3463 exploits

Metasploit300

UPnP SSDP M-SEARCH Information Discovery

CVE-2013-0229—

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attacke

60RIESGO

abrir ↗

Metasploit300

Viproy CUCDM IP Phone XML Services - Call Forwarding Tool

CVE-2014-3300—

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application

23RIESGO

abrir ↗

Metasploit300

Dahua DVR Auth Bypass Scanner

CVE-2013-6117—

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio

60RIESGO

abrir ↗

Metasploit300

HP Intelligent Management ReportImgServlt Directory Traversal

CVE-2012-5203—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw

23RIESGO

abrir ↗

Metasploit300

HP Intelligent Management IctDownloadServlet Directory Traversal

CVE-2012-5204—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw

23RIESGO

abrir ↗

Metasploit300

HP Intelligent Management FaultDownloadServlet Directory Traversal

CVE-2012-5202—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw

23RIESGO

abrir ↗

Metasploit300

HP Intelligent Management BIMS DownloadServlet Directory Traversal

CVE-2013-4823—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Soft

30RIESGO

abrir ↗

Metasploit300

HTTP Host Header Injection Detection

CVE-2016-10073—

The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the emai

60RIESGO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1535—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-

60RIESGO

abrir ↗

Metasploit300

Novell Groupwise Agents HTTP Directory Traversal

CVE-2012-0419—

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 be

30RIESGO

abrir ↗

Metasploit300

Embedthis GoAhead Embedded Web Server Directory Traversal

CVE-2014-9707—

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remot

23RIESGO

abrir ↗

Metasploit300

MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure

CVE-2015-1635CRITICALbajo ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RIESGO

abrir ↗

Metasploit300

Apache ActiveMQ Directory Traversal

CVE-2010-1587—

The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP

60RIESGO

abrir ↗

Metasploit300

Apache ActiveMQ JSP Files Source Disclosure

CVE-2010-1587—

The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP

60RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5792—

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user

30RIESGO

abrir ↗

Metasploit300

Adobe XML External Entity Injection

CVE-2009-3960MEDIUMbajo ataqueransomware

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Service

100RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-35578—

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature

60RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5791—

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

60RIESGO

abrir ↗

Metasploit300

GlassFish Brute Force Utility

CVE-2011-0807—

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Applicati

50RIESGO

abrir ↗

Metasploit300

Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database

CVE-2017-5146—

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Vers

18RIESGO

abrir ↗

Metasploit300

FortiMail Unauthenticated Login Bypass Scanner

CVE-2020-9294—

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 an

40RIESGO

abrir ↗

Metasploit300

Cambium ePMP 1000 Account Password Reset

CVE-2017-5254—

In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the

30RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2021-37343—

A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post au

23RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2019-15949HIGHbajo ataque

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios

100RIESGO

abrir ↗

Metasploit300

Cambium ePMP 1000 'ping' Command Injection (up to v2.5)

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RIESGO

abrir ↗

Metasploit300

Cambium ePMP 1000 'get_chart' Command Injection (v3.1-3.5-RC7)

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RIESGO

abrir ↗

Metasploit300

Emby Version Scanner

CVE-2020-26948—

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

40RIESGO

abrir ↗

Metasploit300

Emby SSRF HTTP Scanner

CVE-2020-26948—

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

40RIESGO

abrir ↗

Metasploit300

ElasticSearch Snapshot API Directory Traversal

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RIESGO

abrir ↗

Metasploit300

D-Link DIR-300B / DIR-600B / DIR-815 / DIR-645 HTTP Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.