Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
86.186 exploits
GitHub PoC★ 4
A network detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks, Inc BIG-IP devices.
CVE-2020-5902CRITICALbajo ataqueransomware28 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-3452HIGHbajo ataque28 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-2893—28 jul 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-11510CRITICALbajo ataqueransomware27 jul 2020
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthent
100RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2020-0610—27 jul 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
35RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-3396CRITICALbajo ataqueransomware27 jul 2020
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers
100RIESGO
abrir ↗
GitHub PoC★ 24
CVE-2020–9934 POC
CVE-2020-9934MEDIUMbajo ataque27 jul 2020
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue
78RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2019-19781CRITICALbajo ataqueransomware27 jul 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
GitHub PoC★ 2
This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data
CVE-2016-2098—27 jul 2020
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to e
60RIESGO
abrir ↗
GitHub PoC★ 1
Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API.
CVE-2019-11510CRITICALbajo ataqueransomware27 jul 2020
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthent
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2020-9934MEDIUMbajo ataque27 jul 2020
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue
78RIESGO
abrir ↗
GitHub PoC★ 2
Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API.
CVE-2019-19781CRITICALbajo ataqueransomware27 jul 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
GitHub PoC★ 2
A registry-based workaround can be used to help protect an affected Windows server, and it can be implemented without requiring an administrator to restart the server. Because of the volatility of this vulnerability, administrators may have to implement the workaround before they apply the security update in order to enable them to update their systems by using a standard deployment cadence.
CVE-2020-1350CRITICALbajo ataque26 jul 2020
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req
100RIESGO
abrir ↗
Exploit-DB
Bludit 3.9.2 - Directory Traversal
CVE-2019-16113—webappsmultiple26 jul 2020
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j
60RIESGO
abrir ↗
Exploit-DB
WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download
CVE-2019-19985MEDIUMwebappsphp26 jul 2020
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file downloa
70RIESGO
abrir ↗
Exploit-DB
ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection
CVE-2016-9488—webappsjava26 jul 2020
ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities
23RIESGO
abrir ↗
Exploit-DB
pfSense 2.4.4-p3 - Cross-Site Request Forgery
CVE-2019-16667—webappsphp26 jul 2020
diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executi
35RIESGO
abrir ↗
Exploit-DB
F5 Big-IP 13.1.3 Build 0.0.6 - Local File Inclusion
CVE-2020-5902CRITICALbajo ataqueransomwarewebappshardware26 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RIESGO
abrir ↗
Exploit-DB
WordPress Plugin Email Subscribers & Newsletters 4.2.2 - 'hash' SQL Injection (Unauthenticated)
CVE-2019-20361HIGHwebappsphp26 jul 2020
There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to b
78RIESGO
abrir ↗
Exploit-DB
Rails 5.0.1 - Remote Code Execution
CVE-2020-8163—webappsruby26 jul 2020
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the
60RIESGO
abrir ↗
Exploit-DB
Bio Star 2.8.2 - Local File Inclusion
CVE-2020-15050—webappsmultiple26 jul 2020
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary fi
50RIESGO
abrir ↗
Exploit-DB
INNEO Startup TOOLS 2018 M040 13.0.70.3804 - Remote Code Execution
CVE-2020-15492—webappsmultiple26 jul 2020
An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe we
28RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2020-1054HIGHbajo ataque25 jul 2020
Win32k Elevation of Privilege Vulnerability
98RIESGO
abrir ↗
GitHub PoC★ 3
Little, stupid python validator(?) for CVE-2020-3452 on CISCO devices.
CVE-2020-3452HIGHbajo ataque25 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2015-8562—25 jul 2020
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi
60RIESGO
abrir ↗
GitHub PoC
没有编写完成，以后学习更多知识在回来完善
CVE-2015-8562—25 jul 2020
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi
60RIESGO
abrir ↗
GitHub PoC★ 20
KaLendsi/CVE-2020-1054
CVE-2020-1054HIGHbajo ataque25 jul 2020
Win32k Elevation of Privilege Vulnerability
98RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-3452HIGHbajo ataque25 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-3452HIGHbajo ataque24 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RIESGO
abrir ↗
GitHub PoC★ 2
unauth file read in cisco asa & firepower.
CVE-2020-3452HIGHbajo ataque24 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RIESGO
abrir ↗
← anteriorpágina 884 / 2873siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.