Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
18.044 exploits
GitHub PoC★ 33
该资源为CVE-2020-0796漏洞复现,包括Python版本和C++版本。主要是集合了github大神们的资源,希望您喜欢~
CVE-2020-0796CRITICALbajo ataqueransomware02 abr 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 4294
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
CVE-2019-17558HIGHbajo ataque01 abr 2020
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V
100RIESGO
abrir ↗
GitHub PoC★ 4294
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
CVE-2020-14882CRITICALbajo ataque01 abr 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
GitHub PoC
A simple dos-tool
CVE-1999-0016—01 abr 2020
Land IP denial of service.
45RIESGO
abrir ↗
GitHub PoC★ 65
jiansiting/CVE-2020-0796
CVE-2020-0796CRITICALbajo ataqueransomware01 abr 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 257
Exploits for Android Binder bug CVE-2020-0041
CVE-2020-0041HIGHbajo ataque31 mar 2020
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could
71RIESGO
abrir ↗
GitHub PoC★ 17
Windows SMBv3 LPE exploit 已编译版
CVE-2020-0796CRITICALbajo ataqueransomware31 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 4
Coronablue exploit
CVE-2020-0796CRITICALbajo ataqueransomware31 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 11
Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability"
CVE-2020-0688HIGHbajo ataqueransomware31 mar 2020
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RIESGO
abrir ↗
GitHub PoC★ 3
nmap script to detect CVE-2020-8515 on Draytek Devices
CVE-2020-8515CRITICALbajo ataque31 mar 2020
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow
100RIESGO
abrir ↗
GitHub PoC
codecat007/CVE-2019-2215
CVE-2019-2215HIGHbajo ataque31 mar 2020
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RIESGO
abrir ↗
GitHub PoC★ 2
SMBGHOST local privilege escalation
CVE-2020-0796CRITICALbajo ataqueransomware31 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 1358
CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost
CVE-2020-0796CRITICALbajo ataqueransomware30 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC
tripledd/cve-2020-0796-vuln
CVE-2020-0796CRITICALbajo ataqueransomware30 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 244
CVE-2020-0796 Local Privilege Escalation POC
CVE-2020-0796CRITICALbajo ataqueransomware30 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC
Exploit for the CVE-2019-16278 vulnerability
CVE-2019-16278CRITICALbajo ataque30 mar 2020
Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co
100RIESGO
abrir ↗
GitHub PoC★ 14
CVE-2020-8515-PoC
CVE-2020-8515CRITICALbajo ataque30 mar 2020
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow
100RIESGO
abrir ↗
GitHub PoC★ 1
CVE-2019-17558 Solr模板注入漏洞图形化一键检测工具。CVE-2019-17558 Solr Velocity Template Vul POC Tool.
CVE-2019-17558HIGHbajo ataque27 mar 2020
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V
100RIESGO
abrir ↗
GitHub PoC★ 7
Icecast Header Overwrite buffer overflow RCE < 2.0.1 (Win32)
CVE-2004-1561—27 mar 2020
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with
60RIESGO
abrir ↗
GitHub PoC★ 8
CVE-2020-1938 / CNVD-2020-1048 Detection Tools
CVE-2020-1938CRITICALbajo ataque27 mar 2020
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RIESGO
abrir ↗
GitHub PoC★ 1
CVE 2018-16763
CVE-2018-16763—26 mar 2020
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RIESGO
abrir ↗
GitHub PoC★ 117
mzer0one/CVE-2020-7961-POC
CVE-2020-7961CRITICALbajo ataque26 mar 2020
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RIESGO
abrir ↗
GitHub PoC★ 20
TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.
CVE-2020-9375—25 mar 2020
TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a
28RIESGO
abrir ↗
GitHub PoC
A check for GHOST; cve-2015-0235
CVE-2015-0235—24 mar 2020
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,
60RIESGO
abrir ↗
GitHub PoC★ 109
quarkslab/CVE-2020-0069_poc
CVE-2020-0069HIGHbajo ataque24 mar 2020
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient
71RIESGO
abrir ↗
GitHub PoC★ 6
CVE-2017-12636|exploit Couchdb
CVE-2017-12636—23 mar 2020
CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include pa
60RIESGO
abrir ↗
GitHub PoC★ 1
DoS PoC for CVE-2020-0796 (SMBGhost)
CVE-2020-0796CRITICALbajo ataqueransomware21 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 3
批量检测幽灵猫漏洞
CVE-2020-1938CRITICALbajo ataque20 mar 2020
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RIESGO
abrir ↗
GitHub PoC★ 9
Vulnerability scanner for CVE-2020-0688
CVE-2020-0688HIGHbajo ataqueransomware19 mar 2020
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RIESGO
abrir ↗
GitHub PoC★ 66
An experimental script PoC for Kr00k vulnerability (CVE-2019-15126)
CVE-2019-15126—18 mar 2020
An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal
23RIESGO
abrir ↗
← anteriorpágina 538 / 602siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.