Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

85.682exploits catalogados
39.953CVEs com exploração pública
24.696testados em laboratório
85.682 exploits
VulnCheck XDB
client-side
CVE-2020-0601HIGHsob ataque19 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-2551CRITICALsob ataque19 jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISCO
abrir ↗
GitHub PoC★ 4
CVE-2019-19844 Docker Edition
CVE-2019-19844—18 jan 2020
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address
35RISCO
abrir ↗
GitHub PoC★ 80
Weblogic RCE with IIOP
CVE-2020-2551CRITICALsob ataque18 jan 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISCO
abrir ↗
GitHub PoC
Perl version of recently published scripts to build ECC certificates with specific parameters re CVE-2020-0601
CVE-2020-0601HIGHsob ataque18 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
GitHub PoC
A fast multi threaded scanner for Citrix ADC (NetScaler) CVE-2019-19781 - Citrixmash
CVE-2019-19781CRITICALsob ataqueransomware17 jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
GitHub PoC★ 2
CurveBall CVE exploitation
CVE-2020-0601HIGHsob ataque17 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
GitHub PoC
C++ based utility to check if certificates are trying to exploit CVE-2020-0601
CVE-2020-0601HIGHsob ataque17 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
GitHub PoC★ 1
CVE-2019-19781 Attack Triage Script
CVE-2019-19781CRITICALsob ataqueransomware17 jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Plantronics Hub 3.13.2 - SpokesUpdateService Privilege Escalation (Metasploit)
CVE-2019-15742—localwindows17 jan 2020
A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application
38RISCO
abrir ↗
GitHub PoC
MarkusZehnle/CVE-2020-0601
CVE-2020-0601HIGHsob ataque17 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-19781CRITICALsob ataqueransomware17 jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
GitHub PoC
批量概念驗證用
CVE-2019-19781CRITICALsob ataqueransomware17 jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
GitHub PoC★ 1
Powershell to patch CVE-2020-0601 . Complete security rollup for Windows 10 1507-1909
CVE-2020-0601HIGHsob ataque17 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
GitHub PoC★ 3
Check ADC for CVE-2019-19781
CVE-2019-19781CRITICALsob ataqueransomware16 jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
GitHub PoC★ 2
This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information
CVE-2019-19781CRITICALsob ataqueransomware16 jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
Exploit-DB
WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting
CVE-2019-20204—webappsphp16 jan 2020
The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginn
23RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHsob ataque16 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
GitHub PoC★ 5
😂An awesome curated list of repos for CVE-2020-0601.
CVE-2020-0601HIGHsob ataque16 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
GitHub PoC
Castaldio86/Detect-CVE-2019-19781
CVE-2019-19781CRITICALsob ataqueransomware16 jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
GitHub PoC★ 1
Curated list of CVE-2020-0601 resources
CVE-2020-0601HIGHsob ataque16 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
GitHub PoC★ 66
Proof of Concept for CVE-2020-0601
CVE-2020-0601HIGHsob ataque16 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
Exploit-DB
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal
CVE-2019-19781CRITICALsob ataqueransomwarewebappsmultiple16 jan 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
Exploit-DB
Jenkins Gitlab Hook Plugin 1.4.2 - Reflected Cross-Site Scripting
CVE-2020-2096—webappsjava16 jan 2020
Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a ref
60RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-10271HIGHsob ataqueransomware15 jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-2618—15 jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
35RISCO
abrir ↗
GitHub PoC★ 35
Zeek package to detect CVE-2020-0601
CVE-2020-0601HIGHsob ataque15 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-2894—15 jan 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Su
50RISCO
abrir ↗
Exploit-DB
Microsoft Windows - CryptoAPI (Crypt32.dll) Elliptic Curve Cryptography (ECC) Spoof Code-Signing Certificate
CVE-2020-0601HIGHsob ataquelocalwindows15 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
GitHub PoC★ 1
A Windows Crypto Exploit
CVE-2020-0601HIGHsob ataque15 jan 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RISCO
abrir ↗
← anteriorpágina 909 / 2.857próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.