Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.980exploits catalogados

36.899CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientes populares riesgo

79.980 exploits

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALbajo ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALbajo ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2018-7600.. called drupalgeddon2,

CVE-2018-7600CRITICALbajo ataqueransomware19 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2018-2628

CVE-2018-2628CRITICALbajo ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

GitHub PoC★ 1

9uest/CVE-2018-2628

CVE-2018-2628CRITICALbajo ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

GitHub PoC★ 119

macOS 10.13.3 (17D47) Safari Wasm Exploit

CVE-2018-4121—19 abr 2018

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud b

28RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALbajo ataqueransomware19 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2018-2628

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

Exploit-DB

Lutron Quantum 2.0 - 3.2.243 - Information Disclosure

CVE-2018-8880—webappshardware18 abr 2018

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing th

28RIESGO

abrir ↗

Exploit-DB

Easy File Sharing Web Server 7.2 - Stack Buffer Overflow

CVE-2018-9059—remotewindows18 abr 2018

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code

60RIESGO

abrir ↗

Exploit-DB

WordPress Plugin Caldera Forms 1.5.9.1 - Cross-Site Scripting

CVE-2018-7747—webappsphp18 abr 2018

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow re

23RIESGO

abrir ↗

Exploit-DB✓ VexDay Proof

Match Clone Script 1.0.4 - Cross-Site Scripting

CVE-2018-9857—webappsphp18 abr 2018

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" sc

23RIESGO

abrir ↗

GitHub PoC★ 20

CVE-2018-2628

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

Exploit-DB

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

CVE-2018-10078—webappsxml18 abr 2018

Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to i

23RIESGO

abrir ↗

GitHub PoC★ 78

CVE-2018-2628 & CVE-2018-2893

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

Exploit-DB

Kodi 17.6 - Persistent Cross-Site Scripting

CVE-2018-8831—webappsmultiple18 abr 2018

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/s

35RIESGO

abrir ↗

GitHub PoC★ 15

WebLogic WLS核心组件反序列化漏洞多线程批量检测脚本 CVE-2018-2628-MultiThreading

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

GitHub PoC★ 14

jiansiting/weblogic-cve-2018-2628

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

GitHub PoC★ 2

zjxzjx/CVE-2018-2628-detect

CVE-2018-2628CRITICALbajo ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

Exploit-DB

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

CVE-2018-10077—webappsxml18 abr 2018

XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to re

23RIESGO

abrir ↗

Exploit-DB

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

CVE-2018-10079—webappsxml18 abr 2018

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users

23RIESGO

abrir ↗

GitHub PoC★ 140

Exploit for Drupal 7 <= 7.57 CVE-2018-7600

CVE-2018-7600CRITICALbajo ataqueransomware17 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RIESGO

abrir ↗

Metasploit0

Oracle Weblogic Server Deserialization RCE

CVE-2018-2628CRITICALbajo ataque17 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RIESGO

abrir ↗

Metasploit0

Nagios XI Chained Remote Code Execution

CVE-2018-8736—17 abr 2018

A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RC

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.