Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
79.107 exploits
Exploit-DBVexDay Proof
ManageEngine Desktop Central - Java Deserialization (Metasploit)
CVE-2020-10189CRITICALbajo ataqueremotemultiple17 mar 2020
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted d
100RIESGO
abrir
Exploit-DBVexDay Proof
Rconfig 3.x - Chained Remote Code Execution (Metasploit)
CVE-2020-10220remotelinux17 mar 2020
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php
60RIESGO
abrir
Exploit-DBVexDay Proof
Rconfig 3.x - Chained Remote Code Execution (Metasploit)
CVE-2019-19509remotelinux17 mar 2020
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a
60RIESGO
abrir
GitHub PoC1
Lightweight PoC and Scanner for CVE-2020-0796 without authentication.
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC3
CVE-2020-0796_CoronaBlue_SMBGhost
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
VulnCheck XDB
denial-of-service
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
VulnCheck XDB
infoleak
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC1
Scanner for CVE-2020-0796
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2019-0708CRITICALbajo ataqueransomware15 mar 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir
GitHub PoC9
CVE-2020-0796-Scanner
CVE-2020-0796CRITICALbajo ataqueransomware15 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC22
An unauthenticated PoC for CVE-2020-0796
CVE-2020-0796CRITICALbajo ataqueransomware15 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC148
CVE-2019-0708 (BlueKeep) proof of concept allowing pre-auth RCE on Windows7
CVE-2019-0708CRITICALbajo ataqueransomware15 mar 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir
Exploit-DB
Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Buffer Overflow (PoC)
CVE-2020-0796CRITICALbajo ataqueransomwaredoswindows14 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
VulnCheck XDB
local
CVE-2016-5195HIGHbajo ataque14 mar 2020
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir
GitHub PoC15
基于asyncio(协程)的CVE-2020-0796 速度还是十分可观的,方便运维师傅们对内网做下快速检测。
CVE-2020-0796CRITICALbajo ataqueransomware14 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC14
Advanced scanner for CVE-2020-0796 - SMBv3 RCE
CVE-2020-0796CRITICALbajo ataqueransomware14 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC
CVE-2020-0796 Python POC buffer overflow
CVE-2020-0796CRITICALbajo ataqueransomware14 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC
A POC remote buffer overflow for CVE-2003-0264 - SLMail 5.5
CVE-2003-026413 mar 2020
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RIESGO
abrir
GitHub PoC
qq1515406085/CVE-2019-19356
CVE-2019-19356HIGHbajo ataque13 mar 2020
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.
76RIESGO
abrir
GitHub PoC224
PoC exploit for the CVE-2019-15126 kr00k vulnerability
CVE-2019-1512613 mar 2020
An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal
23RIESGO
abrir
GitHub PoC1
Little scanner to know if a machine is runnig SMBv3 (possible vulnerability CVE-2020-0796)
CVE-2020-0796CRITICALbajo ataqueransomware13 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC5
CVE-2020-0796 - Working PoC - 20200313
CVE-2020-0796CRITICALbajo ataqueransomware13 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
Metasploit400
SMBv3 Compression Buffer Overflow
CVE-2020-0796CRITICALbajo ataqueransomware13 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
Metasploit200
SMBv3 Compression Buffer Overflow
CVE-2020-0796CRITICALbajo ataqueransomware13 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
Exploit-DB
rConfig 3.9 - 'searchColumn' SQL Injection
CVE-2020-10220webappsphp12 mar 2020
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php
60RIESGO
abrir
Metasploit300
vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection
CVE-2020-1272012 mar 2020
vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.
40RIESGO
abrir
Exploit-DB
WordPress Plugin Appointment Booking Calendar 1.3.34 - CSV Injection
CVE-2020-9371webappsphp12 mar 2020
Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php
23RIESGO
abrir
Exploit-DB
rConfig 3.93 - 'ajaxAddTemplate.php' Authenticated Remote Code Execution
CVE-2020-10221HIGHbajo ataquewebappsphp12 mar 2020
lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands vi
100RIESGO
abrir
GitHub PoC1
Scanners List - Microsoft Windows SMBv3 Remote Code Execution Vulnerability (CVE-2020-0796)
CVE-2020-0796CRITICALbajo ataqueransomware12 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
GitHub PoC4
Scanner script to identify hosts vulnerable to CVE-2020-0796
CVE-2020-0796CRITICALbajo ataqueransomware12 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir
anteriorpágina 782 / 2637siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.