Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

80.184exploits catalogados
37.029CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8970Nuclei 4394Metasploit 3502✓ solo verificadosrecientespopularesriesgo
80.184 exploits
Metasploit500
SMB DOUBLEPULSAR Remote Code Execution
CVE-2017-0144HIGHbajo ataqueransomware14 abr 2017
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Metasploit600
Microsoft Office Word Malicious Hta Execution
CVE-2017-0199HIGHbajo ataqueransomware14 abr 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Concrete5 CMS 8.1.0 - 'Host' Header Injection
CVE-2017-7725—webappsphp14 abr 2017
concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca
23RIESGO
abrir ↗
GitHub PoC★ 12
SyFi/cve-2017-0199
CVE-2017-0199HIGHbajo ataqueransomware13 abr 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RIESGO
abrir ↗
Metasploit600
Juju-run Agent Privilege Escalation
CVE-2017-9232—13 abr 2017
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate pe
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - 'win32kfull!SfnINLPUAHDRAWMENUITEM' Stack Memory Disclosure
CVE-2017-0167—doswindows13 abr 2017
An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and W
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Creative Cloud Desktop Application < 4.0.0.185 - Local Privilege Escalation
CVE-2017-3006—localwindows13 abr 2017
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions durin
28RIESGO
abrir ↗
GitHub PoC
ryhanson/CVE-2017-0199
CVE-2017-0199HIGHbajo ataqueransomware13 abr 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - 'win32k.sys' Multiple 'NtGdiGetDIBitsInternal' System Call
CVE-2017-0058—doswindows13 abr 2017
A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides
23RIESGO
abrir ↗
GitHub PoC
homjxi0e/cve-2017-7269
CVE-2017-7269CRITICALbajo ataque13 abr 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RIESGO
abrir ↗
Exploit-DB
Cisco Catalyst 2960 IOS 12.2(55)SE1 - 'ROCEM' Remote Code Execution
CVE-2017-3881CRITICALbajo ataqueremotehardware12 abr 2017
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co
100RIESGO
abrir ↗
Exploit-DB
Cisco Catalyst 2960 IOS 12.2(55)SE11 - 'ROCEM' Remote Code Execution
CVE-2017-3881CRITICALbajo ataqueremotehardware12 abr 2017
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xen - Broken Check in 'memory_exchange()' Permits PV Guest Breakout
CVE-2017-7228—localmultiple11 abr 2017
An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The e
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting
CVE-2017-2480—webappsmultiple11 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Link Element
CVE-2017-2479—webappsmultiple11 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud b
23RIESGO
abrir ↗
Exploit-DB
Brother MFC-J6520DW - Authentication Bypass / Password Change
CVE-2017-7588—webappshardware11 abr 2017
On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit - 'JSC::SymbolTableEntry::isWatchable' Heap Buffer Overflow
CVE-2017-2469—dosmultiple11 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit - 'Document::adoptNode' Use-After-Free
CVE-2017-2468—dosmultiple11 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB
Proxifier for Mac 2.17/2.18 - Privesc Escalation
CVE-2017-7643—localmacos11 abr 2017
Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid progra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple WebKit - 'JSC::B3::Procedure::resetReachability' Use-After-Free
CVE-2017-2470—dosmultiple11 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Exploit-DB
Quest Privilege Manager 6.0.0 - Arbitrary File Write
CVE-2017-6554—remotelinux10 abr 2017
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to wr
28RIESGO
abrir ↗
GitHub PoC★ 4
Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7.
CVE-2017-6971—10 abr 2017
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary comma
28RIESGO
abrir ↗
Exploit-DB
Moxa MXview 2.8 - Denial of Service
CVE-2017-7456—doswindows10 abr 2017
Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView
28RIESGO
abrir ↗
Exploit-DB
Moxa MXview 2.8 - Private Key Disclosure
CVE-2017-7455—remotewindows10 abr 2017
Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.
28RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-3881CRITICALbajo ataque10 abr 2017
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co
100RIESGO
abrir ↗
Exploit-DB
Moxa MX AOPC-Server 1.5 - XML External Entity Injection
CVE-2017-7457—remotewindows10 abr 2017
XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.
23RIESGO
abrir ↗
GitHub PoC★ 213
CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC
CVE-2017-3881CRITICALbajo ataque10 abr 2017
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co
100RIESGO
abrir ↗
Metasploit600
Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution
CVE-2016-7547—10 abr 2017
A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in
40RIESGO
abrir ↗
Metasploit600
Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution
CVE-2016-7552—10 abr 2017
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows
40RIESGO
abrir ↗
Metasploit300
Quest Privilege Manager pmmasterd Buffer Overflow
CVE-2017-6553—09 abr 2017
Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full
50RIESGO
abrir ↗
← anteriorpágina 978 / 2673siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.