Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.337exploits catalogados

39.873CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.822Exploit-DB 24.487GitHub PoC 17.115VulnCheck XDB 9874Nuclei 4511Metasploit 3528✓ solo verificadosrecientes populares riesgo

24.487 exploits

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5675—remotehardware05 ago 2016

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 th

60RIESGO

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5674—remotehardware05 ago 2016

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR Rea

60RIESGO

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5676—remotehardware05 ago 2016

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillanc

50RIESGO

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5678—remotehardware05 ago 2016

NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows re

23RIESGO

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5680—remotehardware05 ago 2016

Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance

28RIESGO

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5677—remotehardware05 ago 2016

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.

28RIESGO

Exploit-DB

NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities

CVE-2016-5679—remotehardware05 ago 2016

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticat

28RIESGO

Exploit-DB✓ VexDay Proof

Wireshark 2.0.0 < 2.0.4 - MMSE / WAP / WBXML / WSP Dissectors Denial of Service

CVE-2016-6512—dosmultiple03 ago 2016

epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, whi

23RIESGO

Exploit-DB✓ VexDay Proof

Wireshark 2.0.0 < 2.0.4 - CORBA IDL Dissectors Denial of Service

CVE-2016-6503—doswindows_x86-6403 ago 2016

The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual

23RIESGO

Exploit-DB✓ VexDay Proof

Wireshark 1.12.0 < 1.12.12 - NDS Dissector Denial of Service

CVE-2016-6504—dosmultiple03 ago 2016

epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a

23RIESGO

Exploit-DB✓ VexDay Proof

Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - PacketBB Dissector Denial of Service

CVE-2016-6505—dosmultiple03 ago 2016

epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allo

23RIESGO

Exploit-DB

AXIS (Multiple Products) - 'devtools ' (Authenticated) Remote Command Execution

CVE-2015-8257—webappslinux29 jul 2016

The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell

28RIESGO

Exploit-DB

Trend Micro Deep Discovery 3.7/3.8 SP1 (3.81)/3.8 SP2 (3.82) - 'hotfix_upload.cgi' Filename Remote Code Execution

CVE-2016-5840—webappslinux29 jul 2016

hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote ad

23RIESGO

Exploit-DB

phpMyAdmin 4.6.2 - (Authenticated) Remote Code Execution

CVE-2016-5734—webappsphp29 jul 2016

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to

60RIESGO

Exploit-DB✓ VexDay Proof

PHP gettext 1.0.12 - 'gettext.php' Code Execution

CVE-2016-6175—webappsphp25 jul 2016

Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via

28RIESGO

Exploit-DB✓ VexDay Proof

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1607—webappsjava25 jul 2016

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Sec

23RIESGO

Exploit-DB✓ VexDay Proof

PHP 5.5.37/5.6.23/7.0.8 - 'bzread()' Out-of-Bounds Write

CVE-2016-5399—dosphp25 jul 2016

The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attac

23RIESGO

Exploit-DB✓ VexDay Proof

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1611—webappsjava25 jul 2016

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.

23RIESGO

Exploit-DB✓ VexDay Proof

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1610—webappsjava25 jul 2016

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 befo

28RIESGO

Exploit-DB✓ VexDay Proof

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1609—webappsjava25 jul 2016

Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security

23RIESGO

Exploit-DB✓ VexDay Proof

Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities

CVE-2016-1608—webappsjava25 jul 2016

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated u

28RIESGO

Exploit-DB✓ VexDay Proof

NetBSD - 'mail.local(8)' Local Privilege Escalation

CVE-2016-6253—localbsd21 jul 2016

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or

38RIESGO

Exploit-DB✓ VexDay Proof

Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting

CVE-2016-6186—webappspython20 jul 2016

Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/j

23RIESGO

Exploit-DB

Websphere/JBoss/OpenNMS/Symantec Endpoint Protection Manager - Java Deserialization Remote Code Execution

CVE-2015-4852CRITICALbajo ataqueremotemultiple20 jul 2016

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers

100RIESGO

Exploit-DB

OpenSSH 7.2p2 - Username Enumeration

CVE-2016-6210MEDIUMremotelinux20 jul 2016

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static

70RIESGO

Exploit-DB

OpenSSHd 7.2p2 - Username Enumeration

CVE-2016-6210MEDIUMremotelinux18 jul 2016

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static

70RIESGO

Exploit-DB

Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges

CVE-2016-3962—remotehardware17 jul 2016

Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTI

23RIESGO

Exploit-DB

Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges

CVE-2016-3989—remotehardware17 jul 2016

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Secondary Logon Handle Privilege Escalation (MS16-032) (Metasploit)

CVE-2016-0099HIGHbajo ataqueransomwarelocalwindows13 jul 2016

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8

98RIESGO

Exploit-DB✓ VexDay Proof

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (3)

CVE-2016-4203—dosmultiple13 jul 2016

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro

28RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.