Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.186exploits catalogados

40.156CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientes populares riesgo

86.186 exploits

VulnCheck XDB

initial-access

CVE-2020-2883CRITICALbajo ataque16 may 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RIESGO

abrir ↗

GitHub PoC

cdedmondson/Modified-CVE-2015-3306-Exploit

CVE-2015-3306CRITICALbajo ataque15 may 2020

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RIESGO

abrir ↗

Metasploit600

Plesk/myLittleAdmin ViewState .NET Deserialization

CVE-2020-13166—15 may 2020

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcod

60RIESGO

abrir ↗

GitHub PoC

CVE-2018-10933_Scanner

CVE-2018-10933CRITICAL15 may 2020

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP

CVE-2020-3153MEDIUMbajo ataqueransomware15 may 2020

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

83RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2020-3153MEDIUMbajo ataqueransomware15 may 2020

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

83RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2015-3306CRITICALbajo ataque15 may 2020

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-12800—15 may 2020

The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Uploa

60RIESGO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2020-10199HIGHbajo ataque15 may 2020

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

100RIESGO

abrir ↗

GitHub PoC★ 31

CVE-2020-10199 回显版本

CVE-2020-10199HIGHbajo ataque15 may 2020

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

100RIESGO

abrir ↗

GitHub PoC

ES File Explorer Open Port Vulnerability - CVE-2019-6447

CVE-2019-6447—14 may 2020

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2019-0193HIGHbajo ataque14 may 2020

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources,

100RIESGO

abrir ↗

GitHub PoC

CVE-2018-20250漏洞利用

CVE-2018-20250HIGHbajo ataqueransomware13 may 2020

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RIESGO

abrir ↗

GitHub PoC

teddy47/CVE-2019-13272---Documentation

CVE-2019-13272HIGHbajo ataque13 may 2020

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2020-0796CRITICALbajo ataqueransomware13 may 2020

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2004-1769 // Mass cPanel Reset password

CVE-2004-1769—13 may 2020

The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x,

35RIESGO

abrir ↗

GitHub PoC

Microsoft Windows - 'afd.sys' Local Kernel Privilege Escalation Exploit Report (CVE-2011-1249)

CVE-2011-1249—13 may 2020

The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis

23RIESGO

abrir ↗

GitHub PoC★ 15

Proof of concept for Weblogic CVE-2020-2883

CVE-2020-2883CRITICALbajo ataque13 may 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RIESGO

abrir ↗

Metasploit300

WordPress ChopSlider3 id SQLi Scanner

CVE-2020-11530—12 may 2020

A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in

60RIESGO

abrir ↗

GitHub PoC

This document explain Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [CVE-2019-19781]

CVE-2019-19781CRITICALbajo ataqueransomware12 may 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

abrir ↗

GitHub PoC★ 4

CVE-2019-6111 vulnerability exploitation

CVE-2019-6111MEDIUM12 may 2020

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses wh

45RIESGO

abrir ↗

GitHub PoC

alokaranasinghe/cve-2019-11043

CVE-2019-11043HIGHbajo ataqueransomware12 may 2020

Underflow in PHP-FPM can lead to RCE

100RIESGO

abrir ↗

GitHub PoC

SNP Assignment on a Linux vulnerability

CVE-2019-10149CRITICALbajo ataque12 may 2020

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RIESGO

abrir ↗

GitHub PoC

RashmikaEkanayake/Privilege-Escalation-CVE-2019-13272-

CVE-2019-13272HIGHbajo ataque12 may 2020

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RIESGO

abrir ↗

GitHub PoC★ 3

Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538

CVE-2019-13272HIGHbajo ataque12 may 2020

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RIESGO

abrir ↗

GitHub PoC

This is an individual assignment for secure network programming

CVE-2014-6271CRITICALbajo ataque12 may 2020

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

abrir ↗

GitHub PoC

AvishkaSenadheera/CVE-2017-9805---Documentation---IT19143378

CVE-2017-9805HIGHbajo ataque12 may 2020

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a

100RIESGO

abrir ↗

GitHub PoC

Dilith006/CVE-2014-6271

CVE-2014-6271CRITICALbajo ataque12 may 2020

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

abrir ↗

VulnCheck XDB

local

CVE-2016-5195HIGHbajo ataque12 may 2020

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RIESGO

abrir ↗

GitHub PoC

SNP Assignment 1 Report - Linux box exploitation ( Vulnerability CVE-2014-0038)

CVE-2014-0038—12 may 2020

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.