Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.039exploits catalogados
39.796CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.790Exploit-DB 24.487GitHub PoC 16.910VulnCheck XDB 9820Nuclei 4504Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.487 exploits
Exploit-DB✓ VexDay Proof
MediaCoder 0.8.48.5888 - Local Buffer Overflow (SEH)
CVE-2017-8869—localwindows08 may 2017
Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file.
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gemalto SmartDiag Diagnosis Tool < 2.5 - Local Buffer Overflow (SEH)
CVE-2017-6953—localwindows08 may 2017
Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card
23RIESGO
abrir ↗
Exploit-DB
Technicolor DPC3928SL - SNMP Authentication Bypass
CVE-2017-5135—remotehardware05 may 2017
Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. T
28RIESGO
abrir ↗
Exploit-DB
ViMbAdmin 3.0.15 - Multiple Cross-Site Request Forgery Vulnerabilities
CVE-2017-6086—webappsphp05 may 2017
Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.1
23RIESGO
abrir ↗
Exploit-DB
CloudBees Jenkins 2.32.1 - Java Deserialization
CVE-2017-1000353CRITICALbajo ataquedosjava05 may 2017
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code exe
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari 10.0.3 - 'JSC::CachedCall' Use-After-Free
CVE-2017-2491—remotemacos04 may 2017
Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remot
23RIESGO
abrir ↗
Exploit-DB
WordPress Core 4.6 - Remote Code Execution
CVE-2016-10033CRITICALbajo ataquewebappslinux03 may 2017
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir ↗
Exploit-DB
WordPress Core < 4.7.4 - Unauthorized Password Reset
CVE-2017-8295—webappslinux03 may 2017
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for re
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Ghostscript 9.21 - Type Confusion Arbitrary Command Execution (Metasploit)
CVE-2017-8291HIGHbajo ataquelocallinux02 may 2017
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection
CVE-2017-7981—webappsphp01 may 2017
Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project W
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MySQL < 5.6.35 / < 5.7.17 - Integer Overflow
CVE-2017-3599—dosmultiple01 may 2017
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions t
45RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Admidio 3.2.8 - Cross-Site Request Forgery
CVE-2017-8382—webappsphp28 abr 2017
admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 11.576.14393.0 - 'CStyleSheetArray::BuildListOfMatchedRules' Memory Corruption
CVE-2017-0202—doswindows27 abr 2017
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerabi
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion
CVE-2017-5798—webappsmultiple25 abr 2017
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP ve
23RIESGO
abrir ↗
Exploit-DB
LightDM (Ubuntu 16.04/16.10) - 'Guest Account' Local Privilege Escalation
CVE-2017-7358—locallinux25 abr 2017
In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrar
23RIESGO
abrir ↗
Exploit-DB
Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE
CVE-2017-3548—webappsxml25 abr 2017
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integratio
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Office Word - '.RTF' Malicious HTA Execution (Metasploit)
CVE-2017-0199HIGHbajo ataqueransomwareremotewindows25 abr 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari - Array concat Memory Corruption
CVE-2017-2464—dosmultiple25 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Realtek Audio Driver 6.0.1.7898 (Windows 10) - Dolby Audio X2 Service Privilege Escalation
CVE-2017-7293—localwindows25 abr 2017
The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user to
23RIESGO
abrir ↗
Exploit-DB
Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection
CVE-2017-3549—webappsjsp25 abr 2017
Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration). Sup
28RIESGO
abrir ↗
Exploit-DB
OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution
CVE-2017-7221—webappsmultiple25 abr 2017
OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote aut
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion
CVE-2017-5799—webappsmultiple25 abr 2017
A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP ve
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle VirtualBox Guest Additions 5.1.18 - Unprivileged Windows User-Mode Guest Code Double-Free
CVE-2017-3587—dosmultiple25 abr 2017
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported ve
23RIESGO
abrir ↗
Exploit-DB
SquirrelMail < 1.4.22 - Remote Code Execution
CVE-2017-7692—remotelinux23 abr 2017
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle VM VirtualBox - 'virtio-net' Guest-to-Host Out-of-Bounds Write
CVE-2017-3575—dosmultiple20 abr 2017
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote Code Execution
CVE-2017-0160—remotewindows20 abr 2017
Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system t
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle VM VirtualBox 5.0.32 r112930 (x64) - Windows Process COM Injection Privilege Escalation
CVE-2017-3563—localwindows_x86-6420 abr 2017
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 10 (Build 10586) - 'IEETWCollector' Arbitrary Directory/File Deletion Privilege Escalation
CVE-2017-0165—localwindows20 abr 2017
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 10 - Runtime Broker ClipboardBroker Privilege Escalation
CVE-2017-0211—localwindows20 abr 2017
An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle VM VirtualBox 5.1.14 r112924 - Unprivileged Host User to Host Kernel Privilege Escalation via ALSA config
CVE-2017-3576—locallinux20 abr 2017
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th
23RIESGO
abrir ↗
← anteriorpágina 145 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.