Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.562exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.869VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
86.562 exploits
GitHub PoC★ 73
PoC script that shows RCE vulnerability over Intellian Satellite controller
CVE-2020-7980—28 ene 2020
Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to th
60RIESGO
abrir ↗
GitHub PoC★ 20
PoC for CVE-2020-0601 - CryptoAPI exploit
CVE-2020-0601HIGHbajo ataque28 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-7980—28 ene 2020
Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to th
60RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque28 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adive Framework 2.0.8 - Cross-Site Request Forgery (Change Admin Password)
CVE-2020-7991—webappsphp28 ene 2020
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.
23RIESGO
abrir ↗
GitHub PoC★ 1
Python CVE-2019-19781 exploit
CVE-2019-19781CRITICALbajo ataqueransomware28 ene 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
Metasploit600
Centreon Poller Authenticated Remote Command Execution
CVE-2019-19699—27 ene 2020
There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers mi
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows Kernel - Information Disclosure
CVE-2019-1125MEDIUMlocalwindows27 ene 2020
Windows Kernel Information Disclosure Vulnerability
33RIESGO
abrir ↗
GitHub PoC★ 41
This repository contains the sources and documentation for the SWAPGS attack PoC (CVE-2019-1125)
CVE-2019-1125MEDIUM27 ene 2020
Windows Kernel Information Disclosure Vulnerability
33RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALbajo ataque25 ene 2020
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
GitHub PoC
PoC for "CurveBall" CVE-2020-0601
CVE-2020-0601HIGHbajo ataque25 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
GitHub PoC★ 2
Archi73ct/CVE-2020-0609
CVE-2020-0609—24 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RIESGO
abrir ↗
GitHub PoC
Citrix ADC (NetScaler) Honeypot. Supports detection for CVE-2019-19781 and login attempts
CVE-2019-19781CRITICALbajo ataqueransomware24 ene 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
Exploit-DB
Genexis Platinum-4410 2.1 - Authentication Bypass
CVE-2020-6170—webappshardware24 ene 2020
An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cl
23RIESGO
abrir ↗
GitHub PoC★ 78
PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610
CVE-2020-0609—24 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RIESGO
abrir ↗
Exploit-DB
TP-Link TP-SG105E 1.0.0 - Unauthenticated Remote Reboot
CVE-2019-16893—webappshardware24 ene 2020
The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the
35RIESGO
abrir ↗
GitHub PoC★ 69
A proof-of-concept scanner to check an RDG Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610.
CVE-2020-0609—24 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RIESGO
abrir ↗
Exploit-DB
Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC)
CVE-2020-0609—doswindows23 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RIESGO
abrir ↗
GitHub PoC★ 250
PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE
CVE-2020-0609—23 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RIESGO
abrir ↗
Exploit-DB
Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC)
CVE-2020-0610—doswindows23 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
35RIESGO
abrir ↗
GitHub PoC
My Citrix ADC NetScaler CVE-2019-19781 Vulnerability DFIR notes.
CVE-2019-19781CRITICALbajo ataqueransomware23 ene 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Reliable Datagram Sockets (RDS) - rds_atomic_free_op NULL pointer dereference Privilege Escalation (Metasploit)
CVE-2019-9213—locallinux23 ene 2020
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which make
38RIESGO
abrir ↗
GitHub PoC
a script to look for CVE-2019-19781 Vulnerability within a domain and it's subdomains
CVE-2019-19781CRITICALbajo ataqueransomware23 ene 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2020-0610—23 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
35RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque23 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
Exploit-DB
qdPM 9.1 - Remote Code Execution
CVE-2020-7246—webappsphp23 ene 2020
A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code
60RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2020-0609—23 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RIESGO
abrir ↗
Exploit-DB
Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC)
CVE-2020-0610—doswindows23 ene 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Reliable Datagram Sockets (RDS) - rds_atomic_free_op NULL pointer dereference Privilege Escalation (Metasploit)
CVE-2018-5333—locallinux23 ene 2020
In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning
38RIESGO
abrir ↗
GitHub PoC★ 1
CVE-2020-0601: Windows CryptoAPI Vulnerability. (CurveBall/ChainOfFools)
CVE-2020-0601HIGHbajo ataque23 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
← anteriorpágina 928 / 2886siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.