Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.457exploits catalogados
36.589CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.466Referência 23.152GitHub PoC 15.098VulnCheck XDB 8883Nuclei 4365Metasploit 3493✓ solo verificadosrecientespopularesriesgo
79.386 exploits
Metasploit600
LibreNMS addhost Command Injection
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to htm
60RIESGO
abrir ↗GitHub PoC★ 30
MikroTik RouterOS Winbox未经身份验证的任意文件读/写漏洞
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RIESGO
abrir ↗VulnCheck XDB
initial-access
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RIESGO
abrir ↗Exploit-DB
Cisco RV110W - Password Disclosure / Command Execution
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware
28RIESGO
abrir ↗Exploit-DB
Cisco RV110W - Password Disclosure / Command Execution
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Safari - Proxy Object Type Confusion (Metasploit)
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
68RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure (2)
MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
33RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Safari - Proxy Object Type Confusion (Metasploit)
In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improve
61RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure
MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
33RIESGO
abrir ↗Exploit-DB
Huawei Router HG532e - Command Execution
Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affe
23RIESGO
abrir ↗GitHub PoC★ 9
针对类似CVE-2017-10271漏洞的一个java反序列化漏洞扫描器
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CyberLink LabelPrint 2.5 - Stack Buffer Overflow (Metasploit)
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au
43RIESGO
abrir ↗VulnCheck XDB
initial-access
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RIESGO
abrir ↗VulnCheck XDB
client-side
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful
93RIESGO
abrir ↗VulnCheck XDB
client-side
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful
93RIESGO
abrir ↗GitHub PoC★ 12
CVE-2018-15982_EXP_IE
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful
93RIESGO
abrir ↗GitHub PoC★ 29
Aggressor Script to launch IE driveby for CVE-2018-15982.
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful
93RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
True Key (TK) Windows Client - Privilege Escalation vulnerability
41RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
True Key (TK) Windows Client - Weak Directory Permission Vulnerability
41RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ZTE ZXHN H168N - Improper Access Restrictions
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper cha
55RIESGO
abrir ↗Exploit-DB
PrestaShop 1.6.x/1.7.x - Remote Code Execution
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file u
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
True Key (TK) Windows Client - Authentication Abuse vulnerability
41RIESGO
abrir ↗Exploit-DB
Huawei B315s-22 - Information Leak
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjace
28RIESGO
abrir ↗Exploit-DB
Adobe ColdFusion 2018 - Arbitrary File Upload
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr
100RIESGO
abrir ↗Exploit-DB
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
23RIESGO
abrir ↗GitHub PoC★ 11
Script and metasploit module for CVE-2018-15982
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful
93RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ZTE ZXHN H168N - Improper Access Restrictions
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper acc
55RIESGO
abrir ↗Exploit-DB
PrestaShop 1.6.x/1.7.x - Remote Code Execution
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XNU - POSIX Shared Memory Mappings have Incorrect Maximum Protection
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 1
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.