Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.008exploits catalogados
34.638CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientespopularesriesgo
8216 exploits
VulnCheck XDB
initial-access
CVE-2018-1335—11 feb 2020
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to
60RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2015-8562—07 feb 2020
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi
60RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque06 feb 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2018-2628CRITICALbajo ataque05 feb 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2019-5736—04 feb 2020
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b
60RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque03 feb 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2020-15368MEDIUM02 feb 2020
AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering
33RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2019-2215HIGHbajo ataque30 ene 2020
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
98RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque29 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque28 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-7980—28 ene 2020
Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to th
60RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22947CRITICALbajo ataque25 ene 2020
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack whe
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque23 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-19781CRITICALbajo ataqueransomware22 ene 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2019-8605HIGHbajo ataque20 ene 2020
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.1
76RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-2551CRITICALbajo ataque19 ene 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque19 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-19781CRITICALbajo ataqueransomware17 ene 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque16 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-10271HIGHbajo ataqueransomware15 ene 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14883HIGHbajo ataque15 ene 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2020-0601HIGHbajo ataque15 ene 2020
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-3506HIGHbajo ataque15 ene 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-2628CRITICALbajo ataque15 ene 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-2551CRITICALbajo ataque15 ene 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-2555CRITICALbajo ataque15 ene 2020
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2016-0638—15 ene 2020
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, an
35RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-2894—15 ene 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Su
50RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-2883CRITICALbajo ataque15 ene 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-2729CRITICAL15 ene 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
85RIESGO
abrir ↗
← anteriorpágina 247 / 274siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.