Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados

36.465CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientes populares riesgo

79.230 exploits

GitHub PoC★ 79

timwr/CVE-2019-2215

CVE-2019-2215HIGHbajo ataque04 oct 2019

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

Exploit-DB✓ VexDay Proof

Android - Binder Driver Use-After-Free

CVE-2019-2215HIGHbajo ataquelocalandroid04 oct 2019

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

GitHub PoC★ 4

This is a Automated Generate Payload for CVE-2019-11932 (WhatsApp Remote Code Execution)

CVE-2019-11932—04 oct 2019

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

35RIESGO

GitHub PoC★ 8

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 | XSS to RCE

CVE-2019-12562—03 oct 2019

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the mali

23RIESGO

Exploit-DB

mintinstall 7.9.9 - Code Execution

CVE-2019-17080—webappslinux03 oct 2019

mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by a

23RIESGO

GitHub PoC★ 267

double-free bug in WhatsApp exploit poc

CVE-2019-11932—03 oct 2019

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

35RIESGO

Exploit-DB

AnchorCMS < 0.12.3a - Information Disclosure

CVE-2018-7251—webappsmultiple03 oct 2019

An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contain

60RIESGO

GitHub PoC

Remediation task for CVE-2018-15686, CVE-2018-16866, and CVE-2018-16888 affecting SystemD in EL7

CVE-2018-15686HIGH03 oct 2019

systemd: reexec state injection: fgets() on overlong lines leads to line splitting

41RIESGO

Exploit-DB✓ VexDay Proof

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

CVE-2017-0143HIGHbajo ataqueransomwareremotewindows02 oct 2019

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Exploit-DB✓ VexDay Proof

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

CVE-2017-0146HIGHbajo ataqueransomwareremotewindows02 oct 2019

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Exploit-DB✓ VexDay Proof

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

CVE-2017-0144HIGHbajo ataqueransomwareremotewindows02 oct 2019

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Exploit-DB✓ VexDay Proof

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

CVE-2017-0145HIGHbajo ataqueransomwareremotewindows02 oct 2019

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Exploit-DB✓ VexDay Proof

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

CVE-2017-0147HIGHbajo ataqueransomwareremotewindows02 oct 2019

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

Exploit-DB✓ VexDay Proof

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

CVE-2017-0148HIGHbajo ataqueransomwareremotewindows02 oct 2019

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

GitHub PoC★ 1

CVE-2019-17080

CVE-2019-17080—02 oct 2019

mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by a

23RIESGO

VulnCheck XDB

initial-access

CVE-2019-16759CRITICALbajo ataque02 oct 2019

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge

100RIESGO

GitHub PoC★ 20

CVE-2019-16759 vbulletin 5.0.0 till 5.5.4 pre-auth rce

CVE-2019-16759CRITICALbajo ataque02 oct 2019

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge

100RIESGO

Exploit-DB

DotNetNuke < 9.4.0 - Cross-Site Scripting

CVE-2019-12562—webappsmultiple01 oct 2019

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the mali

23RIESGO

GitHub PoC

A simple exploit for CVE-2007-2447

CVE-2007-2447—30 sep 2019

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

GitHub PoC★ 245

ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )

CVE-2019-0708CRITICALbajo ataqueransomware30 sep 2019

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

Exploit-DB

vBulletin 5.x - Remote Command Execution (Metasploit)

CVE-2019-16759CRITICALbajo ataquewebappsphp30 sep 2019

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge

100RIESGO

Exploit-DB

Cisco Small Business 220 Series - Multiple Vulnerabilities

CVE-2019-1914HIGHremotehardware30 sep 2019

Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability

46RIESGO

Exploit-DB

WordPress Plugin ARforms 3.7.1 - Arbitrary File Deletion

CVE-2019-16902—webappsphp30 sep 2019

In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an

23RIESGO

Exploit-DB

Cisco Small Business 220 Series - Multiple Vulnerabilities

CVE-2019-1912CRITICALremotehardware30 sep 2019

Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

53RIESGO

Exploit-DB

Cisco Small Business 220 Series - Multiple Vulnerabilities

CVE-2019-1913CRITICALremotehardware30 sep 2019

Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

53RIESGO

Exploit-DB

phpIPAM 1.4 - SQL Injection

CVE-2019-16692—webappsphp30 sep 2019

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is us

28RIESGO

Exploit-DB

GoAhead 2.5.0 - Host Header Injection

CVE-2019-16645—remotemultiple30 sep 2019

An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) cre

23RIESGO

GitHub PoC★ 75

it works on xp (all version sp2 sp3)

CVE-2019-0708CRITICALbajo ataqueransomware29 sep 2019

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RIESGO

GitHub PoC★ 624

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

CVE-2019-11708CRITICALbajo ataque29 sep 2019

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result

90RIESGO

VulnCheck XDB

initial-access

CVE-2018-14847CRITICALbajo ataque29 sep 2019

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.