Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.058exploits catalogados

35.300CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8.607Nuclei 4.255Metasploit 3.474✓ só verificadosrecentes populares risco

14.096 exploits

GitHub PoC★ 80

Weblogic RCE with IIOP

CVE-2020-2551CRITICALsob ataque18 jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISCO

abrir ↗

GitHub PoC

Perl version of recently published scripts to build ECC certificates with specific parameters re CVE-2020-0601

CVE-2020-0601HIGHsob ataque18 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 4

CVE-2019-19844 Docker Edition

CVE-2019-19844—18 jan 2020

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address

35RISCO

abrir ↗

GitHub PoC

C++ based utility to check if certificates are trying to exploit CVE-2020-0601

CVE-2020-0601HIGHsob ataque17 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC

A fast multi threaded scanner for Citrix ADC (NetScaler) CVE-2019-19781 - Citrixmash

CVE-2019-19781CRITICALsob ataqueransomware17 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC

批量概念驗證用

CVE-2019-19781CRITICALsob ataqueransomware17 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 2

CurveBall CVE exploitation

CVE-2020-0601HIGHsob ataque17 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC

MarkusZehnle/CVE-2020-0601

CVE-2020-0601HIGHsob ataque17 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 1

Powershell to patch CVE-2020-0601 . Complete security rollup for Windows 10 1507-1909

CVE-2020-0601HIGHsob ataque17 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 1

CVE-2019-19781 Attack Triage Script

CVE-2019-19781CRITICALsob ataqueransomware17 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 2

This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information

CVE-2019-19781CRITICALsob ataqueransomware16 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 66

Proof of Concept for CVE-2020-0601

CVE-2020-0601HIGHsob ataque16 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 5

😂An awesome curated list of repos for CVE-2020-0601.

CVE-2020-0601HIGHsob ataque16 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC

Castaldio86/Detect-CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware16 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 1

Curated list of CVE-2020-0601 resources

CVE-2020-0601HIGHsob ataque16 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 3

Check ADC for CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware16 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 2.073

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883

CVE-2017-3248—15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Suppo

60RISCO

abrir ↗

GitHub PoC★ 335

A PoC for CVE-2020-0601

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 2.071

CVE-2020-2551CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISCO

abrir ↗

GitHub PoC★ 35

Zeek package to detect CVE-2020-0601

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 1

A Windows Crypto Exploit

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC

JPurrier/CVE-2020-0601

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 5

Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 888

PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC

Check your website for CVE-2019-19781 Vulnerable

CVE-2019-19781CRITICALsob ataqueransomware15 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 3

Automated forensic script hunting for cve-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware15 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 2.073

CVE-2018-2628CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC

IOCs for CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware15 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC★ 2

Remote Code Execution Exploit

CVE-2020-0601HIGHsob ataque14 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 119

Detect and log CVE-2019-19781 scan and exploitation attempts.

CVE-2019-19781CRITICALsob ataqueransomware13 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.