Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.900exploits catalogados
36.847CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8946Nuclei 4390Metasploit 3501✓ solo verificadosrecientespopularesriesgo
79.900 exploits
Exploit-DB✓ VexDay Proof
WAGO e!DISPLAY 7300T - Multiple Vulnerabilities
CVE-2018-12980—webappsphp13 jul 2018
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabilit
35RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2018-2380MEDIUMbajo ataqueransomware13 jul 2018
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information pr
68RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WAGO e!DISPLAY 7300T - Multiple Vulnerabilities
CVE-2018-12979—webappsphp13 jul 2018
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WAGO e!DISPLAY 7300T - Multiple Vulnerabilities
CVE-2018-12981—webappsphp13 jul 2018
An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabilit
23RIESGO
abrir ↗
Exploit-DB
G DATA Total Security 25.4.0.3 - Activex Buffer Overflow
CVE-2018-10018—doswindows13 jul 2018
The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a lo
23RIESGO
abrir ↗
GitHub PoC
Linux Null pointer dereference
CVE-2009-2692—12 jul 2018
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - Type Confusion with Hoisted SetConcatStrMultiItemBE Instructions
CVE-2018-8229—doswindows12 jul 2018
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi
45RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2018-7602CRITICALbajo ataqueransomware12 jul 2018
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - Out-of-Bounds Reads/Writes
CVE-2018-8145—doswindows12 jul 2018
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could
35RIESGO
abrir ↗
GitHub PoC
happynote3966/CVE-2018-7600
CVE-2018-7600CRITICALbajo ataqueransomware12 jul 2018
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-7600CRITICALbajo ataqueransomware12 jul 2018
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - BoundFunction::NewInstance Out-of-Bounds Read
CVE-2018-8139—doswindows12 jul 2018
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft
35RIESGO
abrir ↗
GitHub PoC
happynote3966/CVE-2018-7602
CVE-2018-7602CRITICALbajo ataqueransomware12 jul 2018
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2014-3704—11 jul 2018
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct
60RIESGO
abrir ↗
GitHub PoC★ 1
dd
CVE-2018-8120HIGHbajo ataqueransomware11 jul 2018
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
100RIESGO
abrir ↗
GitHub PoC★ 1
happynote3966/CVE-2014-3704
CVE-2014-3704—11 jul 2018
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM QRadar SIEM - Remote Code Execution (Metasploit)
CVE-2016-9722—remoteunix11 jul 2018
IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be r
43RIESGO
abrir ↗
Exploit-DB
Instagram-Clone Script 2.0 - Cross-Site Scripting
CVE-2018-13849—webappsphp11 jul 2018
edit_requests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequ
23RIESGO
abrir ↗
Metasploit300
Dicoogle PACS Web Server Directory Traversal
CVE-2018-25113HIGH11 jul 2018
Dicoogle PACS Web Server 2.5.0 Unauthenticated Path Traversal
36RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM QRadar SIEM - Remote Code Execution (Metasploit)
CVE-2018-1612MEDIUMremoteunix11 jul 2018
IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and
60RIESGO
abrir ↗
Metasploit600
QNAP Q'Center change_passwd Command Execution
CVE-2018-0707—11 jul 2018
Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could
50RIESGO
abrir ↗
Metasploit600
QNAP Q'Center change_passwd Command Execution
CVE-2018-0706—11 jul 2018
Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticate
50RIESGO
abrir ↗
Exploit-DB
JavaScript Core - Arbitrary Code Execution
CVE-2018-4192—localmultiple11 jul 2018
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM QRadar SIEM - Remote Code Execution (Metasploit)
CVE-2018-1418—remoteunix11 jul 2018
IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM
50RIESGO
abrir ↗
GitHub PoC★ 5
XML external entity (XXE) vulnerability in /ssc/fm-ws/services in Fortify Software Security Center (SSC) 17.10, 17.20 & 18.10 (0day CVE-2018-12463)
CVE-2018-12463HIGH10 jul 2018
MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities
46RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel < 4.13.9 (Ubuntu 16.04 / Fedora 27) - Local Privilege Escalation
CVE-2017-16995—locallinux10 jul 2018
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial
50RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2018-8174HIGHbajo ataqueransomware10 jul 2018
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RIESGO
abrir ↗
GitHub PoC★ 30
Analysis of VBS exploit CVE-2018-8174
CVE-2018-8174HIGHbajo ataqueransomware10 jul 2018
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RIESGO
abrir ↗
Exploit-DB
Tor Browser < 0.3.2.10 - Use After Free (PoC)
CVE-2018-0491—doslinux09 jul 2018
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of se
28RIESGO
abrir ↗
Exploit-DB
Activision Infinity Ward Call of Duty Modern Warfare 2 - Buffer Overflow
CVE-2018-10718—remotewindows09 jul 2018
Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote at
35RIESGO
abrir ↗
← anteriorpágina 892 / 2664siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.