Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.886exploits catalogados

32.153CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8176Nuclei 4202Metasploit 3462✓ solo verificadosrecientes populares riesgo

3462 exploits

Metasploit300

Ruby on Rails JSON Processor YAML Deserialization Scanner

CVE-2013-0333—

lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly

60RIESGO

abrir ↗

Metasploit300

SSH Username Enumeration

CVE-2003-0190—

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user d

60RIESGO

abrir ↗

Metasploit300

SSH Login Check Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

abrir ↗

Metasploit300

Atlassian Crowd XML Entity Expansion Remote File Access

CVE-2012-2926—

Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible bef

50RIESGO

abrir ↗

Metasploit300

HTTP Options Detection

CVE-2005-3398—

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the

23RIESGO

abrir ↗

Metasploit300

X11 No-Auth Scanner

CVE-1999-0526—

An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.

23RIESGO

abrir ↗

Metasploit300

ElasticSearch Snapshot API Directory Traversal

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RIESGO

abrir ↗

Metasploit300

HTTP Options Detection

CVE-2005-3498—

IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when sessi

23RIESGO

abrir ↗

Metasploit300

Emby SSRF HTTP Scanner

CVE-2020-26948—

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

40RIESGO

abrir ↗

Metasploit300

Novell Zenworks Mobile Device Management Admin Credentials

CVE-2013-1081—

Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote at

50RIESGO

abrir ↗

Metasploit300

TeamViewer Unquoted URI Handler SMB Redirect

CVE-2020-13699—

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could

23RIESGO

abrir ↗

Metasploit300

Cross Platform Webkit File Dropper

CVE-2011-1774—

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbi

50RIESGO

abrir ↗

Metasploit300

Nginx Source Code Disclosure/Download

CVE-2010-2263—

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or

60RIESGO

abrir ↗

Metasploit300

WebEx Remote Command Execution Utility

CVE-2018-15442HIGH

Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

61RIESGO

abrir ↗

Metasploit300

Netgear SPH200D Directory Traversal Vulnerability

CVE-2013-10063MEDIUM

Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET

28RIESGO

abrir ↗

Metasploit300

Samba Symlink Directory Traversal

CVE-2010-0926—

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable

50RIESGO

abrir ↗

Metasploit300

TrendMicro ServerProtect File Access

CVE-2007-6507—

SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous

30RIESGO

abrir ↗

Metasploit300

Emby Version Scanner

CVE-2020-26948—

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

40RIESGO

abrir ↗

Metasploit300

Cambium ePMP 1000 'get_chart' Command Injection (v3.1-3.5-RC7)

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RIESGO

abrir ↗

Metasploit300

Cambium ePMP 1000 'ping' Command Injection (up to v2.5)

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RIESGO

abrir ↗

Metasploit300

Cambium ePMP 1000 Account Password Reset

CVE-2017-5254—

In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the

30RIESGO

abrir ↗

Metasploit300

FortiMail Unauthenticated Login Bypass Scanner

CVE-2020-9294—

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 an

40RIESGO

abrir ↗

Metasploit300

Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database

CVE-2017-5146—

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Vers

18RIESGO

abrir ↗

Metasploit300

GlassFish Brute Force Utility

CVE-2011-0807—

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Applicati

50RIESGO

abrir ↗

Metasploit300

Embedthis GoAhead Embedded Web Server Directory Traversal

CVE-2014-9707—

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remot

23RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-35578—

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature

60RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5791—

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

60RIESGO

abrir ↗

Metasploit300

TrendMicro OfficeScanNT Listener Traversal Arbitrary File Access

CVE-2008-2439—

Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in th

23RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5792—

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user

30RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2019-15949HIGHbajo ataque

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.