Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC

Checks a list of SSH servers for password-based auth availability and for the existence of SSH user enumeration vulnerability (CVE-2018-15473) in those identified.

CVE-2018-15473MEDIUM03 ago 2020

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

GitHub PoC

修改IP地址即可实现命令执行

CVE-2017-8046—01 ago 2020

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RIESGO

GitHub PoC★ 43

POC for CVE-2020-13151

CVE-2020-13151—01 ago 2020

Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)

60RIESGO

GitHub PoC★ 23

CVE-2020-3452 exploit

CVE-2020-3452HIGHbajo ataque01 ago 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC

ericisnotrealname/CVE-2018-8174_EXP

CVE-2018-8174HIGHbajo ataqueransomware31 jul 2020

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RIESGO

GitHub PoC★ 15

ActiveMQ_putshell直接获取webshell

CVE-2016-3088CRITICALbajo ataque31 jul 2020

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RIESGO

GitHub PoC★ 1

Simple detection tool for Blueborne vulnerability found on Android devices --- CVE-2017-0781.

CVE-2017-0781—30 jul 2020

A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1

28RIESGO

GitHub PoC★ 7

Shitrix : CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

CVE-2019-19781CRITICALbajo ataqueransomware30 jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

GitHub PoC

CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script

CVE-2020-3452HIGHbajo ataque29 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC★ 4

A network detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks, Inc BIG-IP devices.

CVE-2020-5902CRITICALbajo ataqueransomware28 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 1

环境下载

CVE-2020-14645CRITICAL28 jul 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

60RIESGO

GitHub PoC

Better version of rastating.github.io/bludit-brute-force-mitigation-bypass/

CVE-2019-17240LOW28 jul 2020

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many

40RIESGO

GitHub PoC★ 1

CrackerCat/CVE-2020-3187

CVE-2020-3187CRITICAL28 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability

85RIESGO

GitHub PoC★ 1

Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API.

CVE-2019-11510CRITICALbajo ataqueransomware27 jul 2020

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthent

100RIESGO

GitHub PoC★ 24

CVE-2020–9934 POC

CVE-2020-9934MEDIUMbajo ataque27 jul 2020

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue

78RIESGO

GitHub PoC★ 2

Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API.

CVE-2019-19781CRITICALbajo ataqueransomware27 jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

GitHub PoC★ 2

This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data

CVE-2016-2098—27 jul 2020

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to e

60RIESGO

GitHub PoC★ 2

A registry-based workaround can be used to help protect an affected Windows server, and it can be implemented without requiring an administrator to restart the server. Because of the volatility of this vulnerability, administrators may have to implement the workaround before they apply the security update in order to enable them to update their systems by using a standard deployment cadence.

CVE-2020-1350CRITICALbajo ataque26 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

GitHub PoC

没有编写完成，以后学习更多知识在回来完善

CVE-2015-8562—25 jul 2020

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RIESGO

GitHub PoC★ 3

Little, stupid python validator(?) for CVE-2020-3452 on CISCO devices.

CVE-2020-3452HIGHbajo ataque25 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC★ 20

KaLendsi/CVE-2020-1054

CVE-2020-1054HIGHbajo ataque25 jul 2020

Win32k Elevation of Privilege Vulnerability

98RIESGO

GitHub PoC★ 25

CVE-2020-3452 Cisco ASA Scanner -unauth Path Traversal Check

CVE-2020-3452HIGHbajo ataque24 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC★ 2

XDev05/CVE-2020-3452-PoC

CVE-2020-3452HIGHbajo ataque24 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC★ 2

unauth file read in cisco asa & firepower.

CVE-2020-3452HIGHbajo ataque24 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC

mr-r3b00t/CVE-2020-3452

CVE-2020-3452HIGHbajo ataque24 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC★ 2

sap netweaver portal add user administrator

CVE-2020-6287CRITICALbajo ataque22 jul 2020

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RIESGO

GitHub PoC

A powershell script to deploy the registry mitigation key for CVE-2020-1350

CVE-2020-1350CRITICALbajo ataque22 jul 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

GitHub PoC★ 28

Onapsis/CVE-2020-6287_RECON-scanner

CVE-2020-6287CRITICALbajo ataque21 jul 2020

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RIESGO

GitHub PoC★ 1

Ported Exploit From Python To Golang

CVE-2018-6892—20 jul 2020

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RIESGO

GitHub PoC★ 96

PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR module: https://github.com/rapid7/metasploit-framework/pull/13852/commits/d1e2c75b3eafa7f62a6aba9fbe6220c8da97baa8 This PoC only create user with unauthentication permission and no more administrator permission set. This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials of this project. Original finding: CVE-2020-6287: Pablo Artuso CVE-2020-6286: Yvan 'iggy' G. Usage: python sap-CVE-2020-6287-add-user.py <HTTP(s)://IP:Port

CVE-2020-6287CRITICALbajo ataque20 jul 2020

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.