Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados

40.037CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientes populares riesgo

85.883 exploits

Exploit-DB

Alt-N MDaemon webmail 20.0.0 - 'file name' Stored Cross Site Scripting (XSS)

CVE-2020-18723—webappswindows08 feb 2021

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code

23RIESGO

abrir ↗

GitHub PoC★ 51

CVE-2021-3156: Sudo heap overflow exploit for Debian 10

CVE-2021-3156HIGHbajo ataque08 feb 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

Exploit-DB

Alt-N MDaemon webmail 20.0.0 - 'Contact name' Stored Cross Site Scripting (XSS)

CVE-2020-18724—webappswindows08 feb 2021

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19

23RIESGO

abrir ↗

GitHub PoC

Fixed version of the Python script to exploit CVE-2018-19571 and CVE-2018-19585 (GitLab 11.4.7 - Authenticated Remote Code Execution) that is available at https://www.exploit-db.com/exploits/49263 (Python 3.9).

CVE-2018-19571—08 feb 2021

GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an

35RIESGO

abrir ↗

VulnCheck XDB

client-side

CVE-2020-27930HIGHbajo ataque07 feb 2021

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wat

76RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2021-3156HIGHbajo ataque07 feb 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

Metasploit300

NCR Command Center Agent Remote Code Execution

CVE-2021-3122—07 feb 2021

CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (wit

40RIESGO

abrir ↗

GitHub PoC★ 2

Grayhaxor/CVE-2021-21148

CVE-2021-21148HIGHbajo ataque07 feb 2021

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap

76RIESGO

abrir ↗

GitHub PoC

Apple Safari Remote Code Execution

CVE-2020-27930HIGHbajo ataque07 feb 2021

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wat

76RIESGO

abrir ↗

GitHub PoC★ 11

CVE-2020-7384

CVE-2020-7384HIGH07 feb 2021

Client-Side Command Injection in Rapid7 Metasploit

68RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2021-3156HIGHbajo ataque06 feb 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 7

1N53C/CVE-2021-3156-PoC

CVE-2021-3156HIGHbajo ataque06 feb 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC★ 2

Poc for CVE-2020-14181

CVE-2020-14181—05 feb 2021

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor

60RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2019-3396CRITICALbajo ataqueransomware05 feb 2021

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

abrir ↗

GitHub PoC

Custom version of sudo 1.8.3p1 with CVE-2021-3156 patches applied

CVE-2021-3156HIGHbajo ataque05 feb 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

GitHub PoC

46o60/CVE-2019-3396_Confluence

CVE-2019-3396CRITICALbajo ataqueransomware05 feb 2021

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RIESGO

abrir ↗

GitHub PoC

DXY0411/CVE-2019-16113

CVE-2019-16113—05 feb 2021

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

60RIESGO

abrir ↗

GitHub PoC★ 4

Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215

CVE-2019-2215HIGHbajo ataque05 feb 2021

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2019-2215HIGHbajo ataque05 feb 2021

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RIESGO

abrir ↗

GitHub PoC★ 1

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution for Python3

CVE-2017-12617HIGHbajo ataque04 feb 2021

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RIESGO

abrir ↗

GitHub PoC

raymontag/cve-2021-1782

CVE-2021-1782HIGHbajo ataque04 feb 2021

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-00

71RIESGO

abrir ↗

GitHub PoC★ 67

CVE-2020-3992 & CVE-2019-5544

CVE-2019-5544CRITICALbajo ataqueransomware04 feb 2021

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of

100RIESGO

abrir ↗

GitHub PoC★ 12

CVE-2021-1994、CVE-2021-2047、CVE-2021-2064、CVE-2021-2108、CVE-2021-2075、CVE-2019-17195、CVE-2020-14756、CVE-2021-2109

CVE-2020-14756CRITICAL04 feb 2021

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versio

70RIESGO

abrir ↗

GitHub PoC

forse01/CVE-2020-25213-Wordpress

CVE-2020-25213CRITICALbajo ataque04 feb 2021

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra

100RIESGO

abrir ↗

GitHub PoC★ 67

CVE-2020-3992 & CVE-2019-5544

CVE-2020-3992CRITICALbajo ataqueransomware04 feb 2021

OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2021-3156HIGHbajo ataque04 feb 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2020-5902CRITICALbajo ataqueransomware04 feb 2021

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

VulnCheck XDB

denial-of-service

CVE-2019-1068HIGHbajo ataque04 feb 2021

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal

83RIESGO

abrir ↗

VulnCheck XDB

infoleak

CVE-2020-3452HIGHbajo ataque04 feb 2021

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-12617HIGHbajo ataque04 feb 2021

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.