Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.107exploits catalogados

36.322CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientes populares riesgo

79.057 exploits

GitHub PoC★ 5

ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and application termination via a malformed payload.

CVE-2020-15956—04 ago 2020

ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer

28RIESGO

GitHub PoC★ 11

Pi-hole Remote Code Execution authenticated Version >= 4.3.2

CVE-2020-8816CRITICALbajo ataque04 ago 2020

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

100RIESGO

GitHub PoC★ 1

CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense

CVE-2020-3452HIGHbajo ataque03 ago 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

VulnCheck XDB

infoleak

CVE-2020-3452HIGHbajo ataque03 ago 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2019-3980—03 ago 2020

The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to

23RIESGO

GitHub PoC

Checks a list of SSH servers for password-based auth availability and for the existence of SSH user enumeration vulnerability (CVE-2018-15473) in those identified.

CVE-2018-15473MEDIUM03 ago 2020

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RIESGO

GitHub PoC

修改IP地址即可实现命令执行

CVE-2017-8046—01 ago 2020

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2017-8046—01 ago 2020

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RIESGO

VulnCheck XDB

denial-of-service

CVE-2020-1350CRITICALbajo ataque01 ago 2020

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req

100RIESGO

VulnCheck XDB

infoleak

CVE-2020-3452HIGHbajo ataque01 ago 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC★ 42

POC for CVE-2020-13151

CVE-2020-13151—01 ago 2020

Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)

60RIESGO

GitHub PoC★ 24

CVE-2020-3452 exploit

CVE-2020-3452HIGHbajo ataque01 ago 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2018-8174HIGHbajo ataqueransomware31 jul 2020

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RIESGO

GitHub PoC

ericisnotrealname/CVE-2018-8174_EXP

CVE-2018-8174HIGHbajo ataqueransomware31 jul 2020

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RIESGO

GitHub PoC★ 15

ActiveMQ_putshell直接获取webshell

CVE-2016-3088CRITICALbajo ataque31 jul 2020

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RIESGO

VulnCheck XDB

initial-access

CVE-2016-3088CRITICALbajo ataque31 jul 2020

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RIESGO

Metasploit500

Aerospike Database UDF Lua Code Execution

CVE-2020-13151—31 jul 2020

Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)

60RIESGO

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALbajo ataqueransomware30 jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

GitHub PoC★ 7

Shitrix : CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

CVE-2019-19781CRITICALbajo ataqueransomware30 jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

GitHub PoC★ 1

Simple detection tool for Blueborne vulnerability found on Android devices --- CVE-2017-0781.

CVE-2017-0781—30 jul 2020

A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1

28RIESGO

Exploit-DB

Cisco Adaptive Security Appliance Software 9.7 - Unauthenticated Arbitrary File Deletion

CVE-2020-3187CRITICALwebappshardware29 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability

85RIESGO

GitHub PoC

CVE-2020-3452 : Cisco ASA and FTD Unauthorized Remote File Reading Nmap NSE Script

CVE-2020-3452HIGHbajo ataque29 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

Exploit-DB

Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting

CVE-2020-15038—webappsphp29 jul 2020

The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.

23RIESGO

VulnCheck XDB

local

CVE-2020-10713—29 jul 2020

A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB veri

23RIESGO

Exploit-DB

Cisco Adaptive Security Appliance Software 9.11 - Local File Inclusion

CVE-2020-3452HIGHbajo ataquewebappshardware28 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

VulnCheck XDB

infoleak

CVE-2020-3452HIGHbajo ataque28 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

GitHub PoC

Better version of rastating.github.io/bludit-brute-force-mitigation-bypass/

CVE-2019-17240LOW28 jul 2020

bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many

40RIESGO

GitHub PoC★ 1

环境下载

CVE-2020-14645CRITICAL28 jul 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

60RIESGO

GitHub PoC★ 1

CrackerCat/CVE-2020-3187

CVE-2020-3187CRITICAL28 jul 2020

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability

85RIESGO

GitHub PoC★ 4

A network detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks, Inc BIG-IP devices.

CVE-2020-5902CRITICALbajo ataqueransomware28 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.