Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.652exploits catalogados
34.545CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8225Nuclei 4228Metasploit 3467✓ solo verificadosrecientespopularesriesgo
8225 exploits
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware08 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware08 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-1732HIGHbajo ataqueransomware08 mar 2021
Windows Win32k Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-16763—07 mar 2021
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware07 mar 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware06 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-26855CRITICALbajo ataqueransomware06 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALbajo ataqueransomware06 mar 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-1732HIGHbajo ataqueransomware05 mar 2021
Windows Win32k Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-9805HIGHbajo ataque05 mar 2021
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-17254—05 mar 2021
The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware04 mar 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware03 mar 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware01 mar 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMbajo ataqueransomware01 mar 2021
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21315HIGHbajo ataque01 mar 2021
Command Injection Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware28 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware27 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware27 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-21972CRITICALbajo ataqueransomware27 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-1350CRITICALbajo ataque27 feb 2021
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-21972CRITICALbajo ataqueransomware26 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-21972CRITICALbajo ataqueransomware25 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware25 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2021-21972CRITICALbajo ataqueransomware25 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware25 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware25 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-21972CRITICALbajo ataqueransomware25 feb 2021
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque25 feb 2021
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2019-17026HIGHbajo ataque24 feb 2021
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are
83RIESGO
abrir ↗
← anteriorpágina 226 / 275siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.