Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
86.508 exploits
Metasploit600
VMware Fusion USB Arbitrator Setuid Privilege Escalation
CVE-2020-3950HIGHbajo ataque17 mar 2020
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for
86RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2019-0708CRITICALbajo ataqueransomware17 mar 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-1938CRITICALbajo ataque17 mar 2020
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2019-0708CRITICALbajo ataqueransomware17 mar 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Rconfig 3.x - Chained Remote Code Execution (Metasploit)
CVE-2020-10220—remotelinux17 mar 2020
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-0708CRITICALbajo ataqueransomware17 mar 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
GitHub PoC★ 1
Scanner CVE-2019-0708
CVE-2019-0708CRITICALbajo ataqueransomware17 mar 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ManageEngine Desktop Central - Java Deserialization (Metasploit)
CVE-2020-10189CRITICALbajo ataqueremotemultiple17 mar 2020
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted d
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Rconfig 3.x - Chained Remote Code Execution (Metasploit)
CVE-2019-19509—remotelinux17 mar 2020
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a
60RIESGO
abrir ↗
GitHub PoC★ 1
Scanner for CVE-2020-0796
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 3
CVE-2020-0796_CoronaBlue_SMBGhost
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 1
Lightweight PoC and Scanner for CVE-2020-0796 without authentication.
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2020-0796CRITICALbajo ataqueransomware16 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-0708CRITICALbajo ataqueransomware15 mar 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
GitHub PoC★ 9
CVE-2020-0796-Scanner
CVE-2020-0796CRITICALbajo ataqueransomware15 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 22
An unauthenticated PoC for CVE-2020-0796
CVE-2020-0796CRITICALbajo ataqueransomware15 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 150
CVE-2019-0708 (BlueKeep) proof of concept allowing pre-auth RCE on Windows7
CVE-2019-0708CRITICALbajo ataqueransomware15 mar 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
GitHub PoC★ 15
基于asyncio(协程)的CVE-2020-0796 速度还是十分可观的,方便运维师傅们对内网做下快速检测。
CVE-2020-0796CRITICALbajo ataqueransomware14 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2016-5195HIGHbajo ataque14 mar 2020
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RIESGO
abrir ↗
GitHub PoC
CVE-2020-0796 Python POC buffer overflow
CVE-2020-0796CRITICALbajo ataqueransomware14 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 14
Advanced scanner for CVE-2020-0796 - SMBv3 RCE
CVE-2020-0796CRITICALbajo ataqueransomware14 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
Exploit-DB
Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Buffer Overflow (PoC)
CVE-2020-0796CRITICALbajo ataqueransomwaredoswindows14 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 225
PoC exploit for the CVE-2019-15126 kr00k vulnerability
CVE-2019-15126—13 mar 2020
An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal
23RIESGO
abrir ↗
GitHub PoC
A POC remote buffer overflow for CVE-2003-0264 - SLMail 5.5
CVE-2003-0264—13 mar 2020
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RIESGO
abrir ↗
Metasploit200
SMBv3 Compression Buffer Overflow
CVE-2020-0796CRITICALbajo ataqueransomware13 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC
qq1515406085/CVE-2019-19356
CVE-2019-19356HIGHbajo ataque13 mar 2020
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.
76RIESGO
abrir ↗
Metasploit400
SMBv3 Compression Buffer Overflow
CVE-2020-0796CRITICALbajo ataqueransomware13 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 1
Little scanner to know if a machine is runnig SMBv3 (possible vulnerability CVE-2020-0796)
CVE-2020-0796CRITICALbajo ataqueransomware13 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
GitHub PoC★ 5
CVE-2020-0796 - Working PoC - 20200313
CVE-2020-0796CRITICALbajo ataqueransomware13 mar 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
← anteriorpágina 916 / 2884siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.