Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados
40.037CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientespopularesriesgo
85.883 exploits
VulnCheck XDB
remote-with-credentials
CVE-2016-3088CRITICALbajo ataque12 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2020-0796CRITICALbajo ataqueransomware11 mar 2021
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 111
proxylogon exploit - CVE-2021-26857
CVE-2021-26857HIGHbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
93RIESGO
abrir ↗
GitHub PoC★ 1077
Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE
CVE-2020-14883HIGHbajo ataque11 mar 2021
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
GitHub PoC★ 5
CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065
CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2016-3088CRITICALbajo ataque11 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB
Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)
CVE-2021-27065HIGHbajo ataqueransomwarewebappswindows11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 59
PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github
CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 12
CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.
CVE-2021-26855CRITICALbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB
Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)
CVE-2021-26855CRITICALbajo ataqueransomwarewebappswindows11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26857HIGHbajo ataqueransomware11 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
93RIESGO
abrir ↗
GitHub PoC★ 5
Apache ActiveMQ Remote Code Execution Exploit
CVE-2016-3088CRITICALbajo ataque11 mar 2021
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RIESGO
abrir ↗
GitHub PoC★ 53
alt3kx/CVE-2021-26855_PoC
CVE-2021-26855CRITICALbajo ataqueransomware10 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB
Atlassian JIRA 8.11.1 - User Enumeration
CVE-2020-14181—webappsmultiple10 mar 2021
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor
60RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware10 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Metasploit600
F5 iControl REST Unauthenticated SSRF Token Generation RCE
CVE-2021-22986CRITICALbajo ataqueransomware10 mar 2021
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
100RIESGO
abrir ↗
GitHub PoC★ 1
oneoy/CVE-2021-1732-Exploit
CVE-2021-1732HIGHbajo ataqueransomware09 mar 2021
Windows Win32k Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
GitHub PoC
CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065
CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC
This script test the CVE-2021-26855 vulnerability on Exchange Server.
CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)
CVE-2006-6576—remotewindows09 mar 2021
Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (
50RIESGO
abrir ↗
GitHub PoC★ 98
h4x0r-dz/CVE-2021-26855
CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 17
PoC exploit code for CVE-2021-26855
CVE-2021-26855CRITICALbajo ataqueransomware09 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-1732HIGHbajo ataqueransomware08 mar 2021
Windows Win32k Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
← anteriorpágina 839 / 2863siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.