Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.652exploits catalogados
34.545CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8225Nuclei 4228Metasploit 3467✓ solo verificadosrecientespopularesriesgo
8225 exploits
VulnCheck XDB
initial-access
CVE-2020-11022MEDIUM02 nov 2020
jQuery has a potential XSS vulnerability
55RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque01 nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque31 oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2014-3153HIGHbajo ataque31 oct 2020
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff
98RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque30 oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-11447—30 oct 2020
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2015-7858—29 oct 2020
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque29 oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque29 oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque29 oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2020-1054HIGHbajo ataque28 oct 2020
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
98RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque28 oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALbajo ataque28 oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2019-2215HIGHbajo ataque27 oct 2020
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
98RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-0688HIGHbajo ataqueransomware23 oct 2020
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2019-1579HIGHbajo ataqueransomware21 oct 2020
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with Glob
83RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMbajo ataqueransomware21 oct 2020
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-25540—19 oct 2020
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-5638CRITICALbajo ataqueransomware19 oct 2020
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-11447—18 oct 2020
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proce
35RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-1472MEDIUMbajo ataqueransomware17 oct 2020
Netlogon Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-7961CRITICALbajo ataque17 oct 2020
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2015-1635CRITICALbajo ataque16 oct 2020
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-1938CRITICALbajo ataque16 oct 2020
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-15107CRITICALbajo ataqueransomware15 oct 2020
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-3452HIGHbajo ataque14 oct 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-5902CRITICALbajo ataqueransomware14 oct 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-2883CRITICALbajo ataque14 oct 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2020-0688HIGHbajo ataqueransomware10 oct 2020
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2020-0796CRITICALbajo ataqueransomware10 oct 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RIESGO
abrir ↗
← anteriorpágina 233 / 275siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.