Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.899exploits catalogados
40.392CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientespopularesriesgo
86.899 exploits
Exploit-DB
Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery
CVE-2019-12624HIGHwebappshardware24 jul 2019
Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability
46RIESGO
abrir ↗
Exploit-DB
Android 7 < 9 - Remote Code Execution
CVE-2019-2107—remoteandroid24 jul 2019
In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. Th
23RIESGO
abrir ↗
Exploit-DB
Linux Kernel 4.10 < 5.1.17 - 'PTRACE_TRACEME' pkexec Local Privilege Escalation
CVE-2019-13272HIGHbajo ataquelocallinux24 jul 2019
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-0708CRITICALbajo ataqueransomware23 jul 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
GitHub PoC★ 2
cve-2014-4014
CVE-2014-4014—23 jul 2019
The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inappli
23RIESGO
abrir ↗
GitHub PoC★ 294
Public work for CVE-2019-0708
CVE-2019-0708CRITICALbajo ataqueransomware23 jul 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
GitHub PoC★ 6
cve-2016-6187
CVE-2016-6187—23 jul 2019
The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buff
23RIESGO
abrir ↗
GitHub PoC★ 1
My old sysret / ptrace PoC
CVE-2014-4699—23 jul 2019
The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved
23RIESGO
abrir ↗
GitHub PoC★ 1
perf_swevent_init
CVE-2013-2094HIGHbajo ataque23 jul 2019
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t
83RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2013-2094HIGHbajo ataque23 jul 2019
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t
83RIESGO
abrir ↗
GitHub PoC★ 1
CVE-2017-16995 eBPF PoC for Ubuntu 16.04
CVE-2017-16995—23 jul 2019
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial
50RIESGO
abrir ↗
Exploit-DB
BACnet Stack 0.8.6 - Denial of Service
CVE-2019-12480—doslinux22 jul 2019
BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a
35RIESGO
abrir ↗
GitHub PoC
Y0n0Y/cve-2018-8120-exp
CVE-2018-8120HIGHbajo ataqueransomware20 jul 2019
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
100RIESGO
abrir ↗
Exploit-DB
MAPLE Computer WBT SNMP Administrator 2.0.195.15 - Remote Buffer Overflow (EggHunter)
CVE-2019-13577—remotewindows_x8619 jul 2019
SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string
28RIESGO
abrir ↗
Exploit-DB
REDCap < 9.1.2 - Cross-Site Scripting
CVE-2019-13029—webappsphp19 jul 2019
Multiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9
23RIESGO
abrir ↗
GitHub PoC
CVE-2019-0708
CVE-2019-0708CRITICALbajo ataqueransomware18 jul 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
GitHub PoC★ 6
A fix for CVE-2019-11358 (prototype pollution in jquery)
CVE-2019-11358—18 jul 2019
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus
45RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque18 jul 2019
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2018-18852—18 jul 2019
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-in
35RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-0708CRITICALbajo ataqueransomware18 jul 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
GitHub PoC★ 3
Scanner PoC for CVE-2019-0708 RDP RCE vuln
CVE-2019-0708CRITICALbajo ataqueransomware18 jul 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 10 1903/1809 - RPCSS Activation Kernel Security Callback Privilege Escalation
CVE-2019-1089—localwindows18 jul 2019
An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an
23RIESGO
abrir ↗
GitHub PoC★ 18
CVE-2019-0708 Exploit Tool
CVE-2019-0708CRITICALbajo ataqueransomware18 jul 2019
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RIESGO
abrir ↗
GitHub PoC★ 1
Proof of calc for CVE-2019-6453
CVE-2019-6453—18 jul 2019
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The a
35RIESGO
abrir ↗
GitHub PoC★ 105
CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE
CVE-2019-11580CRITICALbajo ataqueransomware17 jul 2019
Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attac
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - NtUserSetWindowFNID Win32k User Callback Privilege Escalation (Metasploit)
CVE-2018-8453HIGHbajo ataqueransomwarelocalwindows17 jul 2019
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
100RIESGO
abrir ↗
GitHub PoC★ 1
软件系统安全结课作业：[漏洞复现] CVE-2018-4878 Flash 0day
CVE-2018-4878HIGHbajo ataqueransomware17 jul 2019
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to
93RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2018-4878HIGHbajo ataqueransomware17 jul 2019
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-11580CRITICALbajo ataqueransomware17 jul 2019
Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attac
100RIESGO
abrir ↗
GitHub PoC★ 2
CVE-2019-2107
CVE-2019-2107—17 jul 2019
In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. Th
23RIESGO
abrir ↗
← anteriorpágina 966 / 2897siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.