Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.542exploits catalogados

34.971CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.947VulnCheck XDB 8542Nuclei 4243Metasploit 3468✓ solo verificadosrecientes populares riesgo

13.947 exploits

GitHub PoC

Bludit Exploitation Via upload Image.php

CVE-2019-16113—17 jul 2020

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

60RIESGO

abrir ↗

GitHub PoC

Disables AJP connectors to remediate CVE-2020-1938!

CVE-2020-1938CRITICALbajo ataque17 jul 2020

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RIESGO

abrir ↗

GitHub PoC★ 10

Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781

CVE-2019-19781CRITICALbajo ataqueransomware17 jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 11

CVE-2020-1350 Proof-of-Concept

CVE-2020-1350CRITICALbajo ataque17 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 8

GUI

CVE-2020-5902CRITICALbajo ataqueransomware17 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 18

Denial of Service PoC for CVE-2020-1350 (SIGRed)

CVE-2020-1350CRITICALbajo ataque16 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 1

Environment for CVE_2019_17571

CVE-2019-17571CRITICAL16 jul 2020

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be explo

60RIESGO

abrir ↗

GitHub PoC★ 225

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

CVE-2020-6287CRITICALbajo ataque15 jul 2020

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RIESGO

abrir ↗

GitHub PoC★ 2

ctlyz123/CVE-2020-8193

CVE-2020-8193MEDIUMbajo ataque15 jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RIESGO

abrir ↗

GitHub PoC

Windows registry mitigation response to CVE-2020-1350

CVE-2020-1350CRITICALbajo ataque15 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 237

A denial-of-service proof-of-concept for CVE-2020-1350

CVE-2020-1350CRITICALbajo ataque15 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 15

This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service

CVE-2020-1350CRITICALbajo ataque15 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 9

Detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 (AKA SIGRed)

CVE-2020-1350CRITICALbajo ataque15 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 7

Fake exploit tool, designed to rickroll users attempting to actually exploit.

CVE-2020-1350CRITICALbajo ataque14 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 279

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

CVE-2020-1350CRITICALbajo ataque14 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 4

mr-r3b00t/CVE-2020-1350

CVE-2020-1350CRITICALbajo ataque14 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

abrir ↗

GitHub PoC★ 8

Scanning for CVE-2020-8193 - Auth Bypass check

CVE-2020-8193MEDIUMbajo ataque13 jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RIESGO

abrir ↗

GitHub PoC

quick and dirty PHP RCE proof of concept

CVE-2019-11043HIGHbajo ataqueransomware13 jul 2020

Underflow in PHP-FPM can lead to RCE

100RIESGO

abrir ↗

GitHub PoC★ 3

TeamViewer Store Credentials Decryption

CVE-2019-18988HIGHbajo ataque13 jul 2020

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

86RIESGO

abrir ↗

GitHub PoC★ 45

Citrix ADC从权限绕过到RCE

CVE-2020-8193MEDIUMbajo ataque12 jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RIESGO

abrir ↗

GitHub PoC

momika233/cve-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware12 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC

freeFV/CVE-2020-5902-fofa-scan

CVE-2020-5902CRITICALbajo ataqueransomware12 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 6

This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerability CVE-2020-8193, CVE-2020-8195 and CVE-2020-8196 (disclosed July 08, 2020).

CVE-2020-8193MEDIUMbajo ataque12 jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RIESGO

abrir ↗

GitHub PoC

Exploits for CVE-2020-5902 POC

CVE-2020-5902CRITICALbajo ataqueransomware11 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 10

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware11 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 2

批量检测CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware10 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 5

Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface (TMUI) arbitrary file read and command execution vulnerabilities.

CVE-2020-5902CRITICALbajo ataqueransomware10 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 62

F5 BIG-IP RCE CVE-2020-5902 automatic check tool

CVE-2020-5902CRITICALbajo ataqueransomware10 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

GitHub PoC★ 88

Citrix ADC Vulns

CVE-2020-8193MEDIUMbajo ataque10 jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RIESGO

abrir ↗

GitHub PoC

SharpHack/CVE-2019-19781

CVE-2019-19781CRITICALbajo ataqueransomware09 jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.