Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

87.168exploits catalogados

40.553CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientes populares riesgo

18.080 exploits

GitHub PoC★ 2

Tweaking original PoC (https://github.com/rapid7/metasploit-framework/issues/8064) to work on self-signed certificates

CVE-2017-5638CRITICALbajo ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC

CVE: 2017-5638 in different formats

CVE-2017-5638CRITICALbajo ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC

jrrombaldo/CVE-2017-5638

CVE-2017-5638CRITICALbajo ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC

test struts2 vulnerability CVE-2017-5638 in Mac OS X

CVE-2017-5638CRITICALbajo ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC★ 1

This is Valve for Tomcat7 to block Struts 2 Remote Code Execution vulnerability (CVE-2017-5638)

CVE-2017-5638CRITICALbajo ataqueransomware11 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC★ 22

Example PoC Code for CVE-2017-5638 | Apache Struts Exploit

CVE-2017-5638CRITICALbajo ataqueransomware10 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC

Telegram Bot to manage botnets created with struts vulnerability(CVE-2017-5638)

CVE-2017-5638CRITICALbajo ataqueransomware10 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC★ 34

Demo Application and Exploit

CVE-2017-5638CRITICALbajo ataqueransomware10 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC★ 25

S2-045 漏洞 POC-TOOLS CVE-2017-5638

CVE-2017-5638CRITICALbajo ataqueransomware09 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC

bongbongco/cve-2017-5638

CVE-2017-5638CRITICALbajo ataqueransomware08 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC★ 61

Struts2 S2-045（CVE-2017-5638）Exp with GUI

CVE-2017-5638CRITICALbajo ataqueransomware07 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC★ 23

Struts2 S2-045（CVE-2017-5638）Vulnerability environment - http://www.mottoin.com/97954.html

CVE-2017-5638CRITICALbajo ataqueransomware07 mar 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC★ 81

An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit

CVE-2016-7255HIGHbajo ataqueransomware02 mar 2017

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,

93RIESGO

GitHub PoC★ 1

A brief report on CVE-2016-4117 (A vulnerability in Adobe Flash)

CVE-2016-4117HIGHbajo ataqueransomware23 feb 2017

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as

100RIESGO

GitHub PoC

不完美的利用代码，只能用于学习:)

CVE-2016-4669—21 feb 2017

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS b

38RIESGO

GitHub PoC

Proof of concept exploit for CVE-2012-1723

CVE-2012-1723CRITICALbajo ataqueransomware20 feb 2017

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up

100RIESGO

GitHub PoC★ 1

CVE-2017-2370

CVE-2017-2370—13 feb 2017

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS

28RIESGO

GitHub PoC

CVE-2013-1775 Exploit written in Perl

CVE-2013-1775—11 feb 2017

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypas

38RIESGO

GitHub PoC

Minion plugin for checking Ticketbleed (CVE-2016-9244)

CVE-2016-9244—10 feb 2017

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may

45RIESGO

GitHub PoC★ 30

This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.

CVE-2016-9244—10 feb 2017

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may

45RIESGO

GitHub PoC★ 1

CVE-2016-9079 exploit code as it appeared on https://lists.torproject.org/pipermail/tor-talk/2016-November/042639.html

CVE-2016-9079HIGHbajo ataque08 feb 2017

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis

100RIESGO

GitHub PoC★ 4

dmonst3r/CVE-2015-1579

CVE-2015-1579—03 feb 2017

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra

43RIESGO

GitHub PoC★ 4

paralelo14/CVE-2015-1579

CVE-2015-1579—03 feb 2017

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra

43RIESGO

GitHub PoC★ 5

Go Exploit for CVE-2011-4862

CVE-2011-4862—02 feb 2017

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka k

60RIESGO

GitHub PoC

Ian Beer's exploit for CVE-2017-2370 (kernel memory r/w on iOS 10.2)

CVE-2017-2370—02 feb 2017

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS

28RIESGO

GitHub PoC

OpenSSL CVE-2017-3730 proof-of-concept

CVE-2017-3730—30 ene 2017

Bad (EC)DHE parameters cause a client crash

35RIESGO

GitHub PoC

CVE-2015-1635

CVE-2015-1635CRITICALbajo ataque28 ene 2017

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RIESGO

GitHub PoC

vagrant box exploiting cve-2016-0728

CVE-2016-0728—27 ene 2017

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RIESGO

GitHub PoC

Ian Beer's exploit for CVE-2017-2370 (kernel memory r/w on iOS 10.2) https://bugs.chromium.org/p/project-zero/issues/detail?id=1004

CVE-2017-2370—26 ene 2017

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS

28RIESGO

GitHub PoC★ 1

Proof of concept CVE-2016-2098

CVE-2016-2098—25 ene 2017

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to e

60RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.