Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.600exploits catalogados

39.734CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.742Exploit-DB 24.486GitHub PoC 16.618VulnCheck XDB 9736Nuclei 4493Metasploit 3525✓ solo verificadosrecientes populares riesgo

24.485 exploits

Exploit-DB✓ VexDay Proof

IBM Notes 8.5.x/9.0.x - Denial of Service (2)

CVE-2017-1130—dosmultiple31 ago 2017

IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it woul

43RIESGO

Exploit-DB

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.7 - SQL Injection

CVE-2016-1000125—webappsphp31 ago 2017

Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

23RIESGO

Exploit-DB✓ VexDay Proof

Metasploit Web UI < 4.14.1-20170828 - Cross-Site Request Forgery

CVE-2017-15084—webappsruby30 ago 2017

The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.

23RIESGO

Exploit-DB

Oracle Java JDK/JRE < 1.8.0.131 / Apache Xerces 2.11.0 - 'PDF/Docx' Server Side Denial of Service

CVE-2017-10355—dosphp30 ago 2017

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supporte

28RIESGO

Exploit-DB

D-Link DIR-600 - Authentication Bypass

CVE-2017-12943—webappshardware29 ago 2017

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?RE

35RIESGO

Exploit-DB✓ VexDay Proof

Apple iOS < 10.3.1 - Kernel

CVE-2017-6999—localios26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RIESGO

Exploit-DB✓ VexDay Proof

Apple iOS < 10.3.1 - Kernel

CVE-2017-6995—localios26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RIESGO

Exploit-DB✓ VexDay Proof

Apple iOS < 10.3.1 - Kernel

CVE-2017-6994—localios26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RIESGO

Exploit-DB✓ VexDay Proof

Apple iOS < 10.3.1 - Kernel

CVE-2017-6996—localios26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RIESGO

Exploit-DB✓ VexDay Proof

Apple iOS < 10.3.1 - Kernel

CVE-2017-6998—localios26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RIESGO

Exploit-DB✓ VexDay Proof

Apple iOS < 10.3.1 - Kernel

CVE-2017-6997—localios26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RIESGO

Exploit-DB✓ VexDay Proof

Apple iOS < 10.3.1 - Kernel

CVE-2017-6989—localios26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RIESGO

Exploit-DB✓ VexDay Proof

Apple iOS < 10.3.1 - Kernel

CVE-2017-6979—localios26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS

23RIESGO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12951—doslinux23 ago 2017

The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a den

23RIESGO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12953—doslinux23 ago 2017

The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial

23RIESGO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12950—doslinux23 ago 2017

The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL p

23RIESGO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12954—doslinux23 ago 2017

The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of

23RIESGO

Exploit-DB

Wireless Repeater BE126 - Local File Inclusion

CVE-2017-8770—webappshardware23 ago 2017

There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesys

28RIESGO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12952—doslinux23 ago 2017

The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer d

23RIESGO

Exploit-DB

Automated Logic WebCTRL 6.5 - Unrestricted File Upload / Remote Code Execution

CVE-2017-9650—webappsjava22 ago 2017

An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL

23RIESGO

Exploit-DB✓ VexDay Proof

IBM OpenAdmin Tool - SOAP welcomeServer PHP Code Execution (Metasploit)

CVE-2017-1092—remotephp22 ago 2017

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a

60RIESGO

Exploit-DB

Automated Logic WebCTRL 6.1 - Path Traversal / Arbitrary File Write

CVE-2017-9640—webappsjava22 ago 2017

A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5;

23RIESGO

Exploit-DB

Automated Logic WebCTRL 6.5 - Local Privilege Escalation

CVE-2017-9644—localwindows22 ago 2017

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan

23RIESGO

Exploit-DB

Apache2Triad 1.5.4 - Multiple Vulnerabilities

CVE-2017-12970—webappsphp21 ago 2017

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authenticati

23RIESGO

Exploit-DB

Apache2Triad 1.5.4 - Multiple Vulnerabilities

CVE-2017-12971—webappsphp21 ago 2017

Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or

23RIESGO

Exploit-DB

Apache2Triad 1.5.4 - Multiple Vulnerabilities

CVE-2017-12965—webappsphp21 ago 2017

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID pa

28RIESGO

Exploit-DB

PDF-XChange Viewer 2.5 Build 314.0 - Code Execution

CVE-2017-13056—localwindows21 ago 2017

The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code vi

23RIESGO

Exploit-DB

PHPMyWind 5.3 - Cross-Site Scripting

CVE-2017-12984—webappsphp21 ago 2017

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php.

23RIESGO

Exploit-DB

Apple macOS Sierra 10.12.1 - 'IOFireWireFamily' FireWire Port Denial of Service

CVE-2016-7608—dosmacos19 ago 2017

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOFireWireF

23RIESGO

Exploit-DB

WebKitGTK 2.1.2 (Ubuntu 14.04) - Heap based Buffer Overflow

CVE-2014-1303—locallinux19 ago 2017

Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox

35RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.