Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.035exploits catalogados

39.531CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientes populares riesgo

3524 exploits

Metasploit300

Samba lsa_io_trans_names Heap Overflow

CVE-2007-2446—

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers

60RIESGO

abrir ↗

Metasploit300

Samba read_nttrans_ea_list Integer Overflow

CVE-2013-4124—

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.

50RIESGO

abrir ↗

Metasploit300

SSH Username Enumeration

CVE-2003-0190—

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user d

60RIESGO

abrir ↗

Metasploit300

DoS Exploitation of Allen-Bradley's Legacy Protocol (PCCC)

CVE-2017-7924—

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L

23RIESGO

abrir ↗

Metasploit300

Novell Zenworks Mobile Device Management Admin Credentials

CVE-2013-1081—

Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote at

50RIESGO

abrir ↗

Metasploit300

Nginx Source Code Disclosure/Download

CVE-2010-2263—

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or

60RIESGO

abrir ↗

Metasploit300

SSH Username Enumeration

CVE-2006-5229—

OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations

50RIESGO

abrir ↗

Metasploit300

Microsoft Windows Browser Pool DoS

CVE-2011-0654—

Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in

50RIESGO

abrir ↗

Metasploit300

SSH Login Check Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

abrir ↗

Metasploit300

SSH Version Scanner

CVE-2008-5161LOW

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2

28RIESGO

abrir ↗

Metasploit300

Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module - Denial of Service

CVE-2015-5374—

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01;

60RIESGO

abrir ↗

Metasploit300

Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow DoS

CVE-2010-2550—

The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2

60RIESGO

abrir ↗

Metasploit300

Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop

CVE-2010-0017—

Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB serv

50RIESGO

abrir ↗

Metasploit300

Solaris LPD Arbitrary File Delete

CVE-2005-4797—

Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to

23RIESGO

abrir ↗

Metasploit300

Novell File Reporter Agent Arbitrary File Delete

CVE-2011-2750—

NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pa

23RIESGO

abrir ↗

Metasploit300

Acronis Cyber Protect/Backup machine info disclosure

CVE-2022-3405CRITICAL

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following

43RIESGO

abrir ↗

Metasploit300

Netgear SPH200D Directory Traversal Vulnerability

CVE-2013-10063MEDIUM

Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET

28RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2021-37343—

A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post au

23RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2019-15949HIGHbajo ataque

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios

100RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5791—

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

60RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5792—

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user

30RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-35578—

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature

60RIESGO

abrir ↗

Metasploit300

MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure

CVE-2015-1635CRITICALbajo ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RIESGO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1535—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-

60RIESGO

abrir ↗

Metasploit300

JBoss JMX Console DeploymentFileRepository WAR Upload and Deployment

CVE-2010-0738LOWbajo ataqueransomware

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

95RIESGO

abrir ↗

Metasploit300

JBoss JMX Console Beanshell Deployer WAR Upload and Deployment

CVE-2010-0738LOWbajo ataqueransomware

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

95RIESGO

abrir ↗

Metasploit300

Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference

CVE-2009-3103—

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window

60RIESGO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1122—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode U

60RIESGO

abrir ↗

Metasploit300

Meteocontrol WEBlog Password Extractor

CVE-2016-2298—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext info

23RIESGO

abrir ↗

Metasploit300

Meteocontrol WEBlog Password Extractor

CVE-2016-2296—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pag

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.