Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.634exploits catalogados

40.286CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

86.634 exploits

GitHub PoC★ 157

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

CVE-2019-19781CRITICALbajo ataqueransomware11 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

Exploit-DB

Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution (PoC)

CVE-2019-19781CRITICALbajo ataqueransomwarewebappsmultiple11 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

Exploit-DB

PixelStor 5000 K:4.0.1580-20150629 - Remote Code Execution

CVE-2020-6756CRITICALwebappsphp10 ene 2020

languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to re

53RIESGO

GitHub PoC★ 24

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

CVE-2019-7238CRITICALbajo ataque10 ene 2020

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

100RIESGO

GitHub PoC★ 369

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

CVE-2019-19781CRITICALbajo ataqueransomware10 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALbajo ataqueransomware10 ene 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RIESGO

Exploit-DB✓ VexDay Proof

TotalAV 2020 4.14.31 - Privilege Escalation

CVE-2019-18194—localwindows10 ene 2020

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junctio

23RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2019-2729CRITICAL09 ene 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

85RIESGO

Exploit-DB

Oracle Weblogic 10.3.6.0.0 - Remote Command Execution

CVE-2019-2729CRITICALwebappsjava09 ene 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

85RIESGO

GitHub PoC★ 7

Exploit code for CVE-2019-2729

CVE-2019-2729CRITICAL09 ene 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

85RIESGO

VulnCheck XDB

initial-access

CVE-2019-2725HIGHbajo ataqueransomware08 ene 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RIESGO

GitHub PoC★ 2

weblogic CVE-2019-2725利用exp。

CVE-2019-2725HIGHbajo ataqueransomware08 ene 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RIESGO

GitHub PoC★ 2

Simple Overflow demo, like CVE-2017-11882 exp

CVE-2017-11882HIGHbajo ataqueransomware08 ene 2020

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

Exploit-DB

EBBISLAND EBBSHAVE 6100-09-04-1441 - Remote Buffer Overflow

CVE-2017-3623—remotehardware08 ene 2020

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported ve

28RIESGO

Exploit-DB✓ VexDay Proof

JetBrains TeamCity 2018.2.4 - Remote Code Execution

CVE-2019-15039—remotejava08 ene 2020

An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in

28RIESGO

Exploit-DB

Cisco DCNM JBoss 10.4 - Credential Leakage

CVE-2019-15999MEDIUMremotejava08 ene 2020

Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

33RIESGO

GitHub PoC

geropl/CVE-2019-5736

CVE-2019-5736—08 ene 2020

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RIESGO

Exploit-DB

Microsoft Windows 10 (19H1 1901 x64) - 'ws2ifsl.sys' Use After Free Local Privilege Escalation (kASLR kCFG SMEP)

CVE-2019-1215HIGHbajo ataqueransomwarelocalwindows_x86-6407 ene 2020

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Win

76RIESGO

Metasploit300

"Cablehaunt" Cable Modem WebSocket DoS

CVE-2019-19494—07 ene 2020

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker

23RIESGO

Exploit-DB✓ VexDay Proof

piSignage 2.6.4 - Directory Traversal

CVE-2019-20354—webappshardware07 ene 2020

The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user)

23RIESGO

VulnCheck XDB

local

CVE-2019-1215HIGHbajo ataqueransomware06 ene 2020

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Win

76RIESGO

VulnCheck XDB

initial-access

CVE-2014-6271CRITICALbajo ataque06 ene 2020

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC

CVE-2017-9841 detector script

CVE-2017-9841CRITICALbajo ataque06 ene 2020

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RIESGO

GitHub PoC★ 149

bluefrostsecurity/CVE-2019-1215

CVE-2019-1215HIGHbajo ataqueransomware06 ene 2020

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Win

76RIESGO

GitHub PoC★ 1

Any3ite/CVE-2014-6271

CVE-2014-6271CRITICALbajo ataque06 ene 2020

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC★ 5

CVE-2019-10758

CVE-2019-10758CRITICALbajo ataque05 ene 2020

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse

100RIESGO

VulnCheck XDB

initial-access

CVE-2019-10758CRITICALbajo ataque05 ene 2020

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse

100RIESGO

GitHub PoC

CVE-2017-8759 use file

CVE-2017-8759HIGHbajo ataque02 ene 2020

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely vi

93RIESGO

VulnCheck XDB

client-side

CVE-2017-8759HIGHbajo ataque02 ene 2020

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely vi

93RIESGO

VulnCheck XDB

client-side

CVE-2017-11882HIGHbajo ataqueransomware02 ene 2020

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.