Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados

40.452CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.044 exploits

GitHub PoC★ 317

CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell

CVE-2019-0708CRITICALbajo ataqueransomware21 ene 2020

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

abrir ↗

GitHub PoC★ 94

Indicator of Compromise Scanner for CVE-2019-19781

CVE-2019-19781CRITICALbajo ataqueransomware21 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 59

Indicator of Compromise Scanner for CVE-2019-19781

CVE-2019-19781CRITICALbajo ataqueransomware21 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 5

tfp0 based on CVE-2019-8591/CVE-2019-8605

CVE-2019-8591—20 ene 2020

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.

23RIESGO

abrir ↗

GitHub PoC

Ash112121/CVE-2020-0601

CVE-2020-0601HIGHbajo ataque20 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2017-12615 批量脚本

CVE-2017-12615HIGHbajo ataqueransomware20 ene 2020

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

abrir ↗

GitHub PoC★ 78

CVE-2020-0601 #curveball - Alternative Key Calculator

CVE-2020-0601HIGHbajo ataque20 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC★ 1

Remote Command Injection Vulnerability (CVE-2007-2447), allows remote attackers to execute arbitrary commands by specifying a Samba username containing shell meta characters.

CVE-2007-2447—20 ene 2020

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC

Repo containing lua scripts and PCAP to find CVE-2020-0601 exploit attempts via network traffic

CVE-2020-0601HIGHbajo ataque19 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC★ 3

CurveBall (CVE-2020-0601) - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using elliptic curve cryptography (ECC) is not correctly verified. Attackers can supply hand-rolled generators, bypassing validation, antivirus & all non-protections.

CVE-2020-0601HIGHbajo ataque19 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC★ 211

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

CVE-2020-2551CRITICALbajo ataque19 ene 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2019-19844 Docker Edition

CVE-2019-19844—18 ene 2020

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address

35RIESGO

abrir ↗

GitHub PoC★ 80

Weblogic RCE with IIOP

CVE-2020-2551CRITICALbajo ataque18 ene 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RIESGO

abrir ↗

GitHub PoC

Perl version of recently published scripts to build ECC certificates with specific parameters re CVE-2020-0601

CVE-2020-0601HIGHbajo ataque18 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC★ 2

CurveBall CVE exploitation

CVE-2020-0601HIGHbajo ataque17 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC

批量概念驗證用

CVE-2019-19781CRITICALbajo ataqueransomware17 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC

MarkusZehnle/CVE-2020-0601

CVE-2020-0601HIGHbajo ataque17 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC★ 1

Powershell to patch CVE-2020-0601 . Complete security rollup for Windows 10 1507-1909

CVE-2020-0601HIGHbajo ataque17 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC

C++ based utility to check if certificates are trying to exploit CVE-2020-0601

CVE-2020-0601HIGHbajo ataque17 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC

A fast multi threaded scanner for Citrix ADC (NetScaler) CVE-2019-19781 - Citrixmash

CVE-2019-19781CRITICALbajo ataqueransomware17 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2019-19781 Attack Triage Script

CVE-2019-19781CRITICALbajo ataqueransomware17 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 2

This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information

CVE-2019-19781CRITICALbajo ataqueransomware16 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 1

Curated list of CVE-2020-0601 resources

CVE-2020-0601HIGHbajo ataque16 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC★ 5

😂An awesome curated list of repos for CVE-2020-0601.

CVE-2020-0601HIGHbajo ataque16 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC

Castaldio86/Detect-CVE-2019-19781

CVE-2019-19781CRITICALbajo ataqueransomware16 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 3

Check ADC for CVE-2019-19781

CVE-2019-19781CRITICALbajo ataqueransomware16 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 66

Proof of Concept for CVE-2020-0601

CVE-2020-0601HIGHbajo ataque16 ene 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RIESGO

abrir ↗

GitHub PoC★ 2080

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883

CVE-2017-3248—15 ene 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Suppo

60RIESGO

abrir ↗

GitHub PoC★ 2080

CVE-2018-2628CRITICALbajo ataque15 ene 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

GitHub PoC★ 2071

CVE-2020-2551CRITICALbajo ataque15 ene 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.