Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.337exploits catalogados
39.873CVEs con explotación pública
24.696probados en laboratorio
24.487 exploits
Exploit-DB✓ VexDay Proof
iOS Kernel - AppleOscarAccelerometer Use-After-Free
CVE-2016-1719—dosios28 ene 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'gst_configure' Kernel Buffer Overflow
CVE-2015-7077—dososx28 ene 2016
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'IOHDIXControllerUserClient::convertClient' Buffer Integer Overflow
CVE-2015-6995—dososx28 ene 2016
The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to ex
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX Kernel - Hypervisor Driver Use-After-Free
CVE-2015-7078—dososx28 ene 2016
Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vector
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS - NECP System Control Socket Packet Parsing Kernel Code Execution Integer Overflow
CVE-2015-7083—dosmultiple28 ene 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - IOSCSIPeripheralDeviceType00 Userclient Type 12 Kernel NULL Dereference
CVE-2015-7068—dososx28 ene 2016
IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - IOHIDEventService Use-After-Free
CVE-2016-1719—dosios28 ene 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - io_service_close Use-After-Free
CVE-2016-1720—dososx28 ene 2016
IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cau
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'IOBluetoothHCIUserClient' Arbitrary Kernel Code Execution
CVE-2015-7108—dososx28 ene 2016
The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of serv
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - IOReportHub Use-After-Free
CVE-2016-1719—dosios28 ene 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - AppleOscarCMA Use-After-Free
CVE-2016-1719—dosios28 ene 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Kernel NULL Dereference
CVE-2015-7106—dososx28 ene 2016
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS - Unsandboxable Kernel Code Exection Due to iokit Double Release in IOKit
CVE-2015-7084—dososx28 ene 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
iOS Kernel - AppleOscarGyro Use-After-Free
CVE-2016-1719—dosios28 ene 2016
The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient NULL Dereference
CVE-2015-6996—dososx28 ene 2016
IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute a
23RIESGO
abrir ↗
Exploit-DB
SAP HANA 1.00.095 - hdbindexserver Memory Corruption
CVE-2015-7986—webappsmultiple28 ene 2016
The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a deni
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX - IOBluetoothHCIPacketLogUserClient Memory Corruption
CVE-2015-7047—dososx28 ene 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX Kernel - IOAccelDisplayPipeUserClient2 Use-After-Free
CVE-2015-7047—dososx28 ene 2016
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX / iOS - Double-Delete IOHIDEventQueue::start Code Execution
CVE-2015-7112—dosmultiple28 ene 2016
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attacke
23RIESGO
abrir ↗
Exploit-DB
Linux Kernel 3.x/4.x - prima WLAN Driver Heap Overflow
CVE-2015-0569—doslinux25 ene 2016
Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka W
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)
CVE-2016-0007—localwindows25 ene 2016
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (2)
CVE-2016-0007—localwindows25 ene 2016
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,
23RIESGO
abrir ↗
Exploit-DB
FreeBSD SCTP ICMPv6 - Error Processing
CVE-2016-1879—dosfreebsd25 ene 2016
The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)
CVE-2016-0006—localwindows25 ene 2016
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,
23RIESGO
abrir ↗
Exploit-DB
Huawei Mate 7 - '/dev/hifi_misc' Privilege Escalation
CVE-2015-8088—localhardware24 ene 2016
Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7
23RIESGO
abrir ↗
Exploit-DB
NTP - Local Privilege Escalation
CVE-2016-0727—locallinux21 ene 2016
The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ub
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CesarFTP 0.99g - XCWD Denial of Service
CVE-2006-2961—doswindows19 ene 2016
Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (applicat
50RIESGO
abrir ↗
Exploit-DB
Linux Kernel 4.4.1 - REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (1)
CVE-2016-0728—locallinux19 ene 2016
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref
23RIESGO
abrir ↗
Exploit-DB
Linux Kernel 4.4.1 - REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (2)
CVE-2016-0728—locallinux19 ene 2016
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref
23RIESGO
abrir ↗
Exploit-DB
SeaWell Networks Spectrum - Multiple Vulnerabilities
CVE-2015-8283—webappsphp18 ene 2016
Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.
23RIESGO
abrir ↗
← anteriorpágina 176 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.