Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.058exploits catalogados

35.300CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8607Nuclei 4255Metasploit 3474✓ solo verificadosrecientes populares riesgo

14.080 exploits

GitHub PoC★ 53

Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques

CVE-2016-3309HIGHbajo ataqueransomware06 oct 2017

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;

76RIESGO

abrir ↗

GitHub PoC★ 5

CVE-2017-12617 and CVE-2017-12615 for tomcat server

CVE-2017-12615HIGHbajo ataqueransomware06 oct 2017

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

abrir ↗

GitHub PoC★ 399

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

CVE-2017-12617HIGHbajo ataque05 oct 2017

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RIESGO

abrir ↗

GitHub PoC★ 31

Scan/Exploit Blueborne CVE-2017-0785

CVE-2017-0785—04 oct 2017

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

28RIESGO

abrir ↗

GitHub PoC

Usbhijacking | CVE-2017-8464

CVE-2017-8464HIGHbajo ataque03 oct 2017

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RIESGO

abrir ↗

GitHub PoC★ 63

Webkit uxss exploit (CVE-2017-7089)

CVE-2017-7089—03 oct 2017

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befor

23RIESGO

abrir ↗

GitHub PoC★ 3

this script is used for hack bluetooth devices CVE 2017 0785 which was done by ARMIS This File is password protected for password contact atusha@gmail.comr

CVE-2017-0785—02 oct 2017

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

28RIESGO

abrir ↗

GitHub PoC★ 5

own2pwn/blueborne-CVE-2017-1000251-POC

CVE-2017-1000251—01 oct 2017

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RIESGO

abrir ↗

GitHub PoC★ 3

First script, pgp-cgi-cve-2012-1823 BASH script

CVE-2012-1823CRITICALbajo ataque01 oct 2017

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RIESGO

abrir ↗

GitHub PoC★ 2

SPRING DATA REST CVE-2017-8046 DEMO

CVE-2017-8046—01 oct 2017

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RIESGO

abrir ↗

GitHub PoC

billa3283/CVE-2017-0213

CVE-2017-0213HIGHbajo ataqueransomware01 oct 2017

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser

93RIESGO

abrir ↗

GitHub PoC

CVE-2017-12943

CVE-2017-12943—29 sep 2017

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?RE

35RIESGO

abrir ↗

GitHub PoC

clone

CVE-2017-1000251—28 sep 2017

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RIESGO

abrir ↗

GitHub PoC★ 19

OptionsBleed (CVE-2017-9798) PoC / Scanner

CVE-2017-9798—27 sep 2017

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user

60RIESGO

abrir ↗

GitHub PoC

Check for Struts Vulnerability CVE-2017-5638

CVE-2017-5638CRITICALbajo ataqueransomware25 sep 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

abrir ↗

GitHub PoC★ 11

just a python script for cve-2017-12615

CVE-2017-12615HIGHbajo ataqueransomware25 sep 2017

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

abrir ↗

GitHub PoC

l0n3rs/CVE-2017-9798

CVE-2017-9798—24 sep 2017

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user

60RIESGO

abrir ↗

GitHub PoC

l0n3rs/CVE-2017-8759

CVE-2017-8759HIGHbajo ataque24 sep 2017

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely vi

93RIESGO

abrir ↗

GitHub PoC★ 18

Blueborne CVE-2017-1000251 PoC for linux machines

CVE-2017-1000251—23 sep 2017

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ

28RIESGO

abrir ↗

GitHub PoC★ 112

POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.

CVE-2017-12615HIGHbajo ataqueransomware23 sep 2017

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

abrir ↗

GitHub PoC

Metasploit module for Apache Struts CVE-2017-9791 Remote Code Execution Vulnerability

CVE-2017-9791CRITICALbajo ataque23 sep 2017

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe

100RIESGO

abrir ↗

GitHub PoC

CVE-2017-0785: BlueBorne PoC

CVE-2017-0785—22 sep 2017

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

28RIESGO

abrir ↗

GitHub PoC★ 40

CVE-2017-0785 BlueBorne PoC

CVE-2017-0785—22 sep 2017

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

28RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2017-9798

CVE-2017-9798—20 sep 2017

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user

60RIESGO

abrir ↗

GitHub PoC★ 463

Blueborne CVE-2017-0785 Android information leak vulnerability

CVE-2017-0785—20 sep 2017

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.

28RIESGO

abrir ↗

GitHub PoC★ 2

Two versions of CVE-2017-8759 exploits

CVE-2017-8759HIGHbajo ataque19 sep 2017

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely vi

93RIESGO

abrir ↗

GitHub PoC

CVE-2017-8759

CVE-2017-8759HIGHbajo ataque19 sep 2017

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely vi

93RIESGO

abrir ↗

GitHub PoC

viethdgit/CVE-2017-0199

CVE-2017-0199HIGHbajo ataqueransomware19 sep 2017

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RIESGO

abrir ↗

GitHub PoC★ 3

Checks a shared hosting environment for CVE-2017-9798

CVE-2017-9798—18 sep 2017

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user

60RIESGO

abrir ↗

GitHub PoC★ 5

Simple C# implementation of CVE-2017-8759

CVE-2017-8759HIGHbajo ataque17 sep 2017

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely vi

93RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.