Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.058exploits catalogados

35.300CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8607Nuclei 4255Metasploit 3474✓ solo verificadosrecientes populares riesgo

14.080 exploits

GitHub PoC★ 3

VulApps/CVE-2017-1000117

CVE-2017-1000117—12 ago 2017

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RIESGO

GitHub PoC

test

CVE-2017-1000117—12 ago 2017

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RIESGO

GitHub PoC

thelastbyte/CVE-2017-1000117

CVE-2017-1000117—12 ago 2017

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RIESGO

GitHub PoC★ 15

Manouchehri/CVE-2017-1000117

CVE-2017-1000117—11 ago 2017

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RIESGO

GitHub PoC★ 7

Proof of concept of CVE-2017-1000117

CVE-2017-1000117—11 ago 2017

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RIESGO

GitHub PoC★ 12

poc for cve-2017-10661

CVE-2017-10661—11 ago 2017

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia

28RIESGO

GitHub PoC

This is an exploit for CVE-2017-7047, Works on 10.3.2 and below.

CVE-2017-7047—10 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS

23RIESGO

GitHub PoC★ 8

this tool can generate a exp for cve-2017-8486, it is developed by python

CVE-2017-8464HIGHbajo ataque07 ago 2017

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RIESGO

GitHub PoC★ 7

Attempt to steal kernelcredentials from launchd + task_t pointer (Based on: CVE-2017-7047)

CVE-2017-7047—05 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS

23RIESGO

GitHub PoC★ 3

CVE-2017-2388: Null-pointer dereference in IOFireWireFamily.

CVE-2017-2388—04 ago 2017

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireF

23RIESGO

GitHub PoC★ 14

CVE-2016-0040 Privilege Escalation Exploit For WMI Receive Notification Vulnerability (x86-64)

CVE-2016-0040HIGHbajo ataque03 ago 2017

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to g

91RIESGO

GitHub PoC★ 67

Support x86 and x64

CVE-2017-8464HIGHbajo ataque02 ago 2017

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RIESGO

GitHub PoC★ 47

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

CVE-2016-0792—30 jul 2017

Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to ex

60RIESGO

GitHub PoC★ 53

Broadpwn bug (CVE-2017-9417)

CVE-2017-9417—29 jul 2017

Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn

35RIESGO

GitHub PoC★ 1

ProFTPd 1.3.5 - File Copy

CVE-2015-3306—29 jul 2017

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RIESGO

GitHub PoC★ 1

搭建漏洞利用测试环境

CVE-2017-7494CRITICALbajo ataqueransomware28 jul 2017

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RIESGO

GitHub PoC★ 55

CVE-2017-5689 Proof-of-Concept exploit

CVE-2017-5689CRITICALbajo ataque27 jul 2017

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana

100RIESGO

GitHub PoC★ 3

Exploit created by: R4v3nBl4ck end Pacman

CVE-2017-5638CRITICALbajo ataqueransomware24 jul 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

GitHub PoC★ 66

ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)

CVE-2017-8570HIGHbajo ataque24 jul 2017

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mic

93RIESGO

GitHub PoC★ 1

liusec/WP-CVE-2016-10033

CVE-2016-10033CRITICALbajo ataque22 jul 2017

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RIESGO

GitHub PoC★ 8

CVE-2014-9322 (a.k.a BadIRET) proof of concept for Linux

CVE-2014-9322—19 jul 2017

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack S

23RIESGO

GitHub PoC★ 339

An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)

CVE-2017-0144HIGHbajo ataqueransomware16 jul 2017

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RIESGO

GitHub PoC★ 24

CVE-2014-1303 (WebKit Heap based BOF) proof of concept for Linux

CVE-2014-1303—07 jul 2017

Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox

35RIESGO

GitHub PoC★ 2

Apache struts struts 2 048, CVE-2017-9791.

CVE-2017-9791CRITICALbajo ataque07 jul 2017

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe

100RIESGO

GitHub PoC★ 27

CVE-2017-9791

CVE-2017-9791CRITICALbajo ataque07 jul 2017

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe

100RIESGO

GitHub PoC★ 2

POC for java RMI deserialization vulnerability

CVE-2017-3241—04 jul 2017

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versi

35RIESGO

GitHub PoC

VideoLAN VLC media player 0.9.4 Media Player ty.c buffer overflow

CVE-2008-4654—02 jul 2017

Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player

50RIESGO

GitHub PoC★ 57

CVE-2017-0213 for command line

CVE-2017-0213HIGHbajo ataqueransomware01 jul 2017

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser

93RIESGO

GitHub PoC

FreeSSHD Remote Authentication Bypass Vulnerability (freeSSHd 2.1.3)

CVE-2012-6066—30 jun 2017

freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demons

50RIESGO

GitHub PoC★ 13

sUbc0ol/Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638

CVE-2017-5638CRITICALbajo ataqueransomware30 jun 2017

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.