Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.337exploits catalogados
39.873CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.822Exploit-DB 24.487GitHub PoC 17.115VulnCheck XDB 9874Nuclei 4511Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.487 exploits
Exploit-DB
Yeager CMS 1.2.1 - Multiple Vulnerabilities
CVE-2015-7571—webappsphp10 feb 2016
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7 SP1 (x86) - 'WebDAV' Local Privilege Escalation (MS16-016) (1)
CVE-2016-0051—localwindows_x8610 feb 2016
The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Window
43RIESGO
abrir ↗
Exploit-DB
Yeager CMS 1.2.1 - Multiple Vulnerabilities
CVE-2015-7570—webappsphp10 feb 2016
Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbou
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure
CVE-2016-0956—webappsmultiple10 feb 2016
The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows r
35RIESGO
abrir ↗
Exploit-DB
Yeager CMS 1.2.1 - Multiple Vulnerabilities
CVE-2015-7569—webappsphp10 feb 2016
SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB
Yeager CMS 1.2.1 - Multiple Vulnerabilities
CVE-2015-7567—webappsphp10 feb 2016
SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw
23RIESGO
abrir ↗
Exploit-DB
Yeager CMS 1.2.1 - Multiple Vulnerabilities
CVE-2015-7572—webappsphp10 feb 2016
20RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Photoshop CC / Bridge CC - '.iff' Parsing Memory Corruption
CVE-2016-0953—doswindows09 feb 2016
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (1)
CVE-2016-0951—doswindows09 feb 2016
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (2)
CVE-2016-0952—doswindows09 feb 2016
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RIESGO
abrir ↗
Exploit-DB
Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities
CVE-2016-1524—webappshardware04 feb 2016
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote
60RIESGO
abrir ↗
Exploit-DB
D-Link DVG­N5402SP - Multiple Vulnerabilities
CVE-2015-7246—webappshardware04 feb 2016
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities
CVE-2016-0861—webappshardware04 feb 2016
General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authentica
28RIESGO
abrir ↗
Exploit-DB
Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities
CVE-2016-1525—webappshardware04 feb 2016
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allow
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities
CVE-2016-0862—webappshardware04 feb 2016
General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authentica
23RIESGO
abrir ↗
Exploit-DB
D-Link DVG­N5402SP - Multiple Vulnerabilities
CVE-2015-7245—webappshardware04 feb 2016
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot
50RIESGO
abrir ↗
Exploit-DB
D-Link DVG­N5402SP - Multiple Vulnerabilities
CVE-2015-7247—webappshardware04 feb 2016
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and
28RIESGO
abrir ↗
Exploit-DB
Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting
CVE-2014-2045—webappshardware03 feb 2016
Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30
23RIESGO
abrir ↗
Exploit-DB
eClinicalWorks (CCMR) - Multiple Vulnerabilities
CVE-2015-4591—webappsjsp02 feb 2016
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remo
23RIESGO
abrir ↗
Exploit-DB
eClinicalWorks (CCMR) - Multiple Vulnerabilities
CVE-2015-4594—webappsjsp02 feb 2016
eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the a
23RIESGO
abrir ↗
Exploit-DB
eClinicalWorks (CCMR) - Multiple Vulnerabilities
CVE-2015-4593—webappsjsp02 feb 2016
eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserServ
23RIESGO
abrir ↗
Exploit-DB
eClinicalWorks (CCMR) - Multiple Vulnerabilities
CVE-2015-4592—webappsjsp02 feb 2016
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allow
23RIESGO
abrir ↗
Exploit-DB
Microsoft Internet Explorer 11 - javascript Code Execution
CVE-2015-2419HIGHbajo ataquelocalwindows01 feb 2016
JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial o
83RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - IOHIDEventService Use-After-Free
CVE-2016-1719—dosios28 ene 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Kernel NULL Dereference
CVE-2015-7106—dososx28 ene 2016
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - io_service_close Use-After-Free
CVE-2016-1720—dososx28 ene 2016
IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cau
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - AppleOscarCompass Use-After-Free
CVE-2016-1719—dosios28 ene 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX Kernel - IOAccelDisplayPipeUserClient2 Use-After-Free
CVE-2015-7047—dososx28 ene 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX Kernel - no-more-senders Use-After-Free
CVE-2015-7047—dososx28 ene 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - IOBluetoothHCIPacketLogUserClient Memory Corruption
CVE-2015-7047—dososx28 ene 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
← anteriorpágina 175 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.