Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.655exploits catalogados
39.248CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.347Exploit-DB 24.485GitHub PoC 16.178VulnCheck XDB 9644Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
Apple WebKit - 'ComposedTreeIterator::traverseNextInShadowTree' Use-After-Free
CVE-2017-2466—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit - 'table' Use-After-Free
CVE-2017-2471—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit - 'FormSubmission::create' Use-After-Free
CVE-2017-2460—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS/iOS Kernel 10.12.3 (16D32) - Bad Locking in necp_open Use-After-Free
CVE-2017-2478—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS/iOS Kernel 10.12.3 (16D32) - SIOCGIFORDER Socket ioctl Off-by-One Memory Corruption
CVE-2017-2474—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit - 'WebCore::toJS' Use-After-Free
CVE-2017-2476—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS Kernel 10.12.3 (16D32) - 'audit_pipe_open' Off-by-One Memory Corruption
CVE-2017-2483—dosmacos04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Broadcom Wi-Fi SoC - TDLS Teardown Request Remote Heap Overflow
CVE-2017-0561—remotehardware04 abr 2017
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS Kernel 10.12.2 (16C67) - Memory Disclosure Due to Lack of Bounds Checking in AppleIntelCapriController::getDisplayPipeCapability
CVE-2017-2489—dosmacos04 abr 2017
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graph
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS/iOS Kernel 10.12.3 (16D32) - 'bpf' Heap Overflow
CVE-2017-2482—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting
CVE-2017-2364—webappsmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS/iOS Kernel 10.12.3 (16D32) - Double-Free Due to Bad Locking in fsevents Device
CVE-2017-2490—localmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit 10.0.2 (12602.3.12.0.1_ r210800) - 'constructJSReadableStreamDefaultReader' Type Confusion
CVE-2017-2457—webappsmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issu
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit 10.0.2 - HTMLInputElement Use-After-Free
CVE-2017-2454—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting
CVE-2017-2442—webappsmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issu
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Broadcom Wi-Fi SoC - 'dhd_handle_swc_evt' Heap Overflow
CVE-2017-0569—remotehardware04 abr 2017
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execu
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Broadcom Wi-Fi SoC - Heap Overflow 'wlc_tdls_cal_mic_chk' Due to Large RSN IE in TDLS Setup Confirm Frame
CVE-2017-0561—doshardware04 abr 2017
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit - Negative-Size memmove in HTMLFormElement
CVE-2017-2459—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS/iOS Kernel 10.12.3 (16D32) - SIOCSIFORDER Socket ioctl Memory Corruption Due to Bad Bounds Checking
CVE-2017-2473—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_spawn
CVE-2017-2472—dosmacos04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit 10.0.2 (12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting
CVE-2017-2445—webappsmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS Kernel 10.12.2 (16C67) - 'AppleIntelCapriController::GetLinkConfig' Code Execution Due to Lack of Bounds Checking
CVE-2017-2443—dosmacos04 abr 2017
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graph
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit - 'RenderLayer' Use-After-Free
CVE-2017-2455—dosmultiple04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bluecoat ASG 6.6/CAS 1.3 - Local Privilege Escalation (Metasploit)
CVE-2016-9091—locallinux03 abr 2017
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bluecoat ASG 6.6/CAS 1.3 - OS Command Injection (Metasploit)
CVE-2016-9091—remotelinux03 abr 2017
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Splunk Enterprise - Information Disclosure
CVE-2017-5607—webappsmultiple31 mar 2017
Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS/IOS 10.12.2 (16C67) - 'mach_msg' Heap Overflow
CVE-2017-2456—dosmultiple30 mar 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sync Breeze Enterprise 9.5.16 - 'Import Command' Local Buffer Overflow
CVE-2017-7310—localwindows29 mar 2017
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
QNAP QTS < 4.2.4 - Domain Privilege Escalation
CVE-2017-5227—localhardware27 mar 2017
QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory
CVE-2017-2619—remotemultiple27 mar 2017
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access
28RIESGO
abrir ↗
← anteriorpágina 47 / 636siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.