Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

72.018exploits catalogados
32.219CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8195Nuclei 4217Metasploit 3463✓ solo verificadosrecientespopularesriesgo
22.786 exploits
Exploit-DB
Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities
CVE-2016-1593—11 abr 2016
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remot
50RIESGO
abrir ↗
Exploit-DB
Google Android - IMemory Native Interface is Insecure for IPC Use
CVE-2016-0846—11 abr 2016
libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.
23RIESGO
abrir ↗
Exploit-DB
Axis Network Cameras - Multiple Vulnerabilities
CVE-2015-8256—11 abr 2016
Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.
35RIESGO
abrir ↗
Exploit-DB
Google Android - IOMX 'getConfig'/'getParameter' Information Disclosure
CVE-2016-2417—11 abr 2016
media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befo
23RIESGO
abrir ↗
Exploit-DB
Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities
CVE-2016-1594—11 abr 2016
Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request
23RIESGO
abrir ↗
Exploit-DB
Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities
CVE-2016-1595—11 abr 2016
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows rem
23RIESGO
abrir ↗
Exploit-DB
Apple Intel HD 3000 Graphics Driver 10.0.0 - Local Privilege Escalation
CVE-2016-1743—08 abr 2016
The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary co
23RIESGO
abrir ↗
Exploit-DB
ExaGrid - Known SSH Key and Default Password (Metasploit)
CVE-2016-1560—07 abr 2016
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and
60RIESGO
abrir ↗
Exploit-DB
ExaGrid - Known SSH Key and Default Password (Metasploit)
CVE-2016-1561—07 abr 2016
ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, whic
60RIESGO
abrir ↗
Exploit-DB
Linux Kernel (x86) - Disable ASLR by Setting the RLIMIT_STACK Resource to Unlimited
CVE-2016-3672—06 abr 2016
The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize t
23RIESGO
abrir ↗
Exploit-DB
Panda Endpoint Administration Agent < 7.50.00 - Local Privilege Escalation
CVE-2016-3943—06 abr 2016
Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows Kernel - 'win32k.sys' Local Privilege Escalation (MS14-058)
CVE-2014-4113HIGHbajo ataque05 abr 2016
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RIESGO
abrir ↗
Exploit-DB
Microsoft Internet Explorer - MSHTML!CSVGHelpers::SetAttributeStringAndPointer Use-After-Free (MS16-023)
CVE-2016-0111—05 abr 2016
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a
35RIESGO
abrir ↗
Exploit-DB
Hexchat IRC Client 2.11.0 - Directory Traversal
CVE-2016-2087—04 abr 2016
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary
23RIESGO
abrir ↗
Exploit-DB
Hexchat IRC Client 2.11.0 - CAP LS Handling Buffer Overflow
CVE-2016-2233—04 abr 2016
Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC serve
35RIESGO
abrir ↗
Exploit-DB
DameWare Remote Controller < 12.0.0.520 - Remote Code Execution
CVE-2016-2345—03 abr 2016
Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows rem
35RIESGO
abrir ↗
Exploit-DB
Adobe Flash - URLStream.readObject Use-After-Free
CVE-2015-8048—01 abr 2016
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RIESGO
abrir ↗
Exploit-DB
PHP 5.5.33/7.0.4 - SNMP Format String
CVE-2016-4071—01 abr 2016
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20,
28RIESGO
abrir ↗
Exploit-DB
Microsoft Windows Kernel - Bitmap Use-After-Free
CVE-2016-0094—01 abr 2016
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows Kernel - 'NtGdiGetTextExtentExW' Out-of-Bounds Memory Read
CVE-2016-0093—01 abr 2016
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W
23RIESGO
abrir ↗
Exploit-DB
Adobe Flash - Color.setTransform Use-After-Free
CVE-2015-5574—01 abr 2016
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and
35RIESGO
abrir ↗
Exploit-DB
Adobe Flash - textfield.maxChars Use-After-Free
CVE-2015-8426—01 abr 2016
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RIESGO
abrir ↗
Exploit-DB
Apache Jetspeed - Arbitrary File Upload (Metasploit)
CVE-2016-0710—31 mar 2016
Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attacker
50RIESGO
abrir ↗
Exploit-DB
Apache OpenMeetings 1.9.x < 3.1.0 - '.ZIP' File Directory Traversal
CVE-2016-0784—31 mar 2016
Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1
35RIESGO
abrir ↗
Exploit-DB
Apache Jetspeed - Arbitrary File Upload (Metasploit)
CVE-2016-0709—31 mar 2016
Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3
60RIESGO
abrir ↗
Exploit-DB
Google Android 5.0.1 - Metaphor Stagefright (ASLR Bypass)
CVE-2015-3864—30 mar 2016
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in A
60RIESGO
abrir ↗
Exploit-DB
Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (2)
CVE-2016-1768—30 mar 2016
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m
28RIESGO
abrir ↗
Exploit-DB
Apple QuickTime < 7.7.79.80.95 - '.PSD' Parsing Memory Corruption
CVE-2016-1769—30 mar 2016
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m
23RIESGO
abrir ↗
Exploit-DB
Kamailio 4.3.4 - Heap Buffer Overflow
CVE-2016-2385—30 mar 2016
Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER a
35RIESGO
abrir ↗
Exploit-DB
Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (1)
CVE-2016-1767—30 mar 2016
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m
23RIESGO
abrir ↗
← anteriorpágina 164 / 760siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.