Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

80.184exploits catalogados
37.029CVEs con explotación pública
24.695probados en laboratorio
80.184 exploits
Metasploit300
Veritas/Symantec Backup Exec SSL NDMP Connection Use-After-Free
CVE-2017-889510 may 2017
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a u
60RIESGO
abrir
Exploit-DB
Cisco DPC3928 Router - Arbitrary File Disclosure
CVE-2017-11502webappshardware10 may 2017
Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /..
23RIESGO
abrir
Exploit-DB
Microsoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' SMB Remote Code Execution (MS17-010)
CVE-2017-0144HIGHbajo ataqueransomwareremotewindows_x86-6410 may 2017
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir
Exploit-DB
Microsoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' SMB Remote Code Execution (MS17-010)
CVE-2017-0146HIGHbajo ataqueransomwareremotewindows_x86-6410 may 2017
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir
Exploit-DB
Microsoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' SMB Remote Code Execution (MS17-010)
CVE-2017-0143HIGHbajo ataqueransomwareremotewindows_x86-6410 may 2017
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir
Exploit-DB
CMS Made Simple 2.1.6 - Multiple Vulnerabilities
CVE-2017-8912HIGHwebappsphp10 may 2017
CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code para
41RIESGO
abrir
Exploit-DB
Microsoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' SMB Remote Code Execution (MS17-010)
CVE-2017-0145HIGHbajo ataqueransomwareremotewindows_x86-6410 may 2017
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir
Exploit-DB
Microsoft Windows Server 2008 R2 (x64) - 'SrvOs2FeaToNt' SMB Remote Code Execution (MS17-010)
CVE-2017-0148HIGHbajo ataqueransomwareremotewindows_x86-6410 may 2017
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir
GitHub PoC1
Code and vulnerable WordPress container for exploiting CVE-2016-10033
CVE-2016-10033CRITICALbajo ataque10 may 2017
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir
GitHub PoC9
RCE against WordPress 4.6; Python port of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html
CVE-2016-10033CRITICALbajo ataque10 may 2017
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir
Exploit-DB
wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One
CVE-2017-2800HIGHdosmultiple09 may 2017
A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting
41RIESGO
abrir
Exploit-DB
Personify360 7.5.2/7.6.1 - Improper Access Restrictions
CVE-2017-7312webappsaspx09 may 2017
An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add
23RIESGO
abrir
GitHub PoC4
CVE-2017-8779 aka RPCBomb
CVE-2017-877909 may 2017
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider t
60RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remote Type Confusion
CVE-2017-0290remotewindows09 may 2017
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve
45RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2017-5689CRITICALbajo ataque09 may 2017
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
100RIESGO
abrir
Exploit-DB
Personify360 7.5.2/7.6.1 - Improper Database Schema Access Restrictions
CVE-2017-7314webappsaspx09 may 2017
An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating
23RIESGO
abrir
GitHub PoC3
simple python poc for CVE-2017-5689
CVE-2017-5689CRITICALbajo ataque09 may 2017
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
100RIESGO
abrir
Exploit-DB
RPCBind / libtirpc - Denial of Service
CVE-2017-8779doslinux08 may 2017
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider t
60RIESGO
abrir
Exploit-DBVexDay Proof
Gemalto SmartDiag Diagnosis Tool < 2.5 - Local Buffer Overflow (SEH)
CVE-2017-6953localwindows08 may 2017
Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card
23RIESGO
abrir
Exploit-DBVexDay Proof
MediaCoder 0.8.48.5888 - Local Buffer Overflow (SEH)
CVE-2017-8869localwindows08 may 2017
Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file.
43RIESGO
abrir
GitHub PoC20
cyberheartmi9/CVE-2017-8295
CVE-2017-829506 may 2017
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for re
28RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2017-829506 may 2017
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for re
28RIESGO
abrir
GitHub PoC8
Apache Struts 2.0 RCE vulnerability - Allows an attacker to inject OS commands into a web application through the content-type header
CVE-2017-5638CRITICALbajo ataqueransomware05 may 2017
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RIESGO
abrir
Exploit-DB
ViMbAdmin 3.0.15 - Multiple Cross-Site Request Forgery Vulnerabilities
CVE-2017-6086webappsphp05 may 2017
Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.1
23RIESGO
abrir
Metasploit300
Intel AMT Digest Authentication Bypass Scanner
CVE-2017-5689CRITICALbajo ataque05 may 2017
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
100RIESGO
abrir
Exploit-DB
Technicolor DPC3928SL - SNMP Authentication Bypass
CVE-2017-5135remotehardware05 may 2017
Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. T
28RIESGO
abrir
GitHub PoC2
a plugin that protects your wp site from the CVE-2017-8295 vulnerability
CVE-2017-829505 may 2017
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for re
28RIESGO
abrir
Exploit-DB
CloudBees Jenkins 2.32.1 - Java Deserialization
CVE-2017-1000353CRITICALbajo ataquedosjava05 may 2017
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code exe
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2017-5638CRITICALbajo ataqueransomware05 may 2017
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RIESGO
abrir
GitHub PoC39
CerberusSecurity/CVE-2017-5689
CVE-2017-5689CRITICALbajo ataque04 may 2017
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
100RIESGO
abrir
anteriorpágina 974 / 2673siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.