Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.020exploits catalogados

35.276CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8604Nuclei 4251Metasploit 3473✓ solo verificadosrecientes populares riesgo

14.014 exploits

GitHub PoC

cve-2016-6515

CVE-2016-6515—06 ene 2019

The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password a

35RIESGO

abrir ↗

GitHub PoC

cve-2015-3306

CVE-2015-3306—06 ene 2019

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RIESGO

abrir ↗

GitHub PoC

cve-2015-1427

CVE-2015-1427CRITICALbajo ataque06 ene 2019

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s

100RIESGO

abrir ↗

GitHub PoC

cve-2015-8103

CVE-2015-8103—06 ene 2019

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RIESGO

abrir ↗

GitHub PoC

cve-2015-5602

CVE-2015-5602—06 ene 2019

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is d

23RIESGO

abrir ↗

GitHub PoC

cve-2016-7434

CVE-2016-7434—06 ene 2019

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf

35RIESGO

abrir ↗

GitHub PoC

CVE-2009-1330 - Easy RM to MP3 Converter Local Buffer Overflow. Tested on Windows XP Professional SP3

CVE-2009-1330—05 ene 2019

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RIESGO

abrir ↗

GitHub PoC

Villaquiranm/5MMISSI-CVE-2017-1000499

CVE-2017-1000499—05 ene 2019

phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a

23RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit

CVE-2016-4971—05 ene 2019

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted F

35RIESGO

abrir ↗

GitHub PoC★ 2

## 在kali中自动化生成cve-2017-8570的恶意ppsx文件和配置msf监听

CVE-2017-8570HIGHbajo ataque03 ene 2019

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mic

93RIESGO

abrir ↗

GitHub PoC

Bash implementation of CVE-2014-5284

CVE-2014-5284—02 ene 2019

host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, whi

23RIESGO

abrir ↗

GitHub PoC

some works on CVE-2018-19518

CVE-2018-19518—31 dic 2018

University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh c

60RIESGO

abrir ↗

GitHub PoC★ 1

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

CVE-2008-0166—31 dic 2018

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RIESGO

abrir ↗

GitHub PoC

Simple exploit for Easy RM to MP3 Converter 2.7.3.700 on Windows 7 32b.

CVE-2009-1330—30 dic 2018

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2018-8581

CVE-2018-8581HIGHbajo ataqueransomware28 dic 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RIESGO

abrir ↗

GitHub PoC★ 331

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2018-8581HIGHbajo ataqueransomware27 dic 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RIESGO

abrir ↗

GitHub PoC

Weblogic(CVE-2017-10271)

CVE-2017-10271HIGHbajo ataqueransomware20 dic 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RIESGO

abrir ↗

GitHub PoC★ 5

Flash 2018-15982 UAF

CVE-2018-15982HIGHbajo ataqueransomware20 dic 2018

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful

93RIESGO

abrir ↗

GitHub PoC

Yable/CVE-2018-4878

CVE-2018-4878HIGHbajo ataqueransomware19 dic 2018

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

93RIESGO

abrir ↗

GitHub PoC

CVE-2003-0264 - SLMail 5.5 POP3 'PASS' Remote Buffer Overflow Vulnerability. Tested on Windows XP Professional SP3.

CVE-2003-0264—19 dic 2018

Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg

60RIESGO

abrir ↗

GitHub PoC

qiantu88/CVE-2018-8120

CVE-2018-8120HIGHbajo ataqueransomware19 dic 2018

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RIESGO

abrir ↗

GitHub PoC

CVE-2004-2271 - Minishare 1.4.1 HTTP Server Remote Buffer Overflow Vulnerability. Tested on Windows XP Professional SP3.

CVE-2004-2271—19 dic 2018

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req

60RIESGO

abrir ↗

GitHub PoC

CVE-2012-5106 - Freefloat FTP Server Buffer Overflow Vulnerability. Tested on Windows XP Professional SP3.

CVE-2012-5106—19 dic 2018

Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via

28RIESGO

abrir ↗

GitHub PoC

CVE-2007-1567 - WarFTP 1.65 'USER' Remote Buffer Overflow Vulnerability. Tested on Windows XP Professional SP3.

CVE-2007-1567—19 dic 2018

Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of s

35RIESGO

abrir ↗

GitHub PoC

qiantu88/CVE-2017-12617

CVE-2017-12617HIGHbajo ataque19 dic 2018

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RIESGO

abrir ↗

GitHub PoC

https://github.com/milo2012/CVE-2018-0296.git

CVE-2018-0296HIGHbajo ataque19 dic 2018

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo

100RIESGO

abrir ↗

GitHub PoC★ 6

LibSSH Authentication Bypass CVE-2018-10933

CVE-2018-10933CRITICAL19 dic 2018

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

85RIESGO

abrir ↗

GitHub PoC★ 83

An implementation of CVE-2009-0689 for the Nintendo Wii.

CVE-2009-0689—18 dic 2018

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation

28RIESGO

abrir ↗

GitHub PoC★ 30

MikroTik RouterOS Winbox未经身份验证的任意文件读/写漏洞

CVE-2018-14847CRITICALbajo ataque15 dic 2018

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated

100RIESGO

abrir ↗

GitHub PoC★ 9

针对类似CVE-2017-10271漏洞的一个java反序列化漏洞扫描器

CVE-2017-10271HIGHbajo ataqueransomware13 dic 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.