Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.781exploits catalogados
36.771CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.475Referência 23.305GitHub PoC 15.197VulnCheck XDB 8932Nuclei 4379Metasploit 3493✓ solo verificadosrecientespopularesriesgo
79.697 exploits
Exploit-DB✓ VexDay Proof
Navigate CMS - (Unauthenticated) Remote Code Execution (Metasploit)
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs N
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zahir Enterprise Plus 6 - Stack Buffer Overflow (Metasploit)
Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute a
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Unitrends UEB - HTTP API Remote Code Execution (Metasploit)
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of
60RIESGO
abrir ↗GitHub PoC★ 8
proof-of-concept (PoC) for linux dists based on Debian, CentOS and RedHat - exploit 1
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with a
76RIESGO
abrir ↗Exploit-DB
net-snmp 5.7.3 - (Authenticated) Denial of Service (PoC)
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by
28RIESGO
abrir ↗Exploit-DB
net-snmp 5.7.3 - (Authenticated) Denial of Service (PoC)
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnm
53RIESGO
abrir ↗VulnCheck XDB
initial-access
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Su
50RIESGO
abrir ↗VulnCheck XDB
initial-access
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
60RIESGO
abrir ↗VulnCheck XDB
initial-access
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
100RIESGO
abrir ↗GitHub PoC★ 2
Metasploit module for CVE-2016-1555
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
100RIESGO
abrir ↗Exploit-DB
Git Submodule - Arbitrary Code Execution (PoC)
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x be
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerabili
28RIESGO
abrir ↗GitHub PoC★ 2
webr0ck/poc-cve-2018-1273
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property
100RIESGO
abrir ↗Metasploit600
Malicious Git HTTP Server For CVE-2018-17456
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x be
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateS
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves b
35RIESGO
abrir ↗Exploit-DB
Cisco Prime Infrastructure - (Unauthenticated) Remote Code Execution
Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability
60RIESGO
abrir ↗GitHub PoC★ 10
An exploitation tool to extract passwords using CVE-2015-5995.
Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attacke
28RIESGO
abrir ↗Metasploit600
Cisco Prime Infrastructure Unauthenticated Remote Code Execution
Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability
60RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗GitHub PoC★ 116
Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati
70RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
RICOH MP C1803 JPN Printer - Cross-Site Scripting
On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of add
23RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
RICOH MP C1803 JPN Printer - Cross-Site Scripting
On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding a
23RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
Linux Kernel < 4.11.8 - 'mq_notify: double sock_put()' Local Privilege Escalation
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.