Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
86.991 exploits
Exploit-DB
xorg-x11-server 1.20.3 - Privilege Escalation
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh
43RIESGO
abrir ↗GitHub PoC
matlink/evince-cve-2017-1000083
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to e
50RIESGO
abrir ↗GitHub PoC★ 10
CVE-2018-2628漏洞工具包
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RIESGO
abrir ↗Exploit-DB
Microstrategy Web 7 - Cross-Site Scripting / Directory Traversal
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (
23RIESGO
abrir ↗GitHub PoC
matlink/cve-2017-1000083-atril-nautilus
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to e
50RIESGO
abrir ↗Exploit-DB
Microstrategy Web 7 - Cross-Site Scripting / Directory Traversal
Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subp
43RIESGO
abrir ↗Exploit-DB
School Event Management System 1.0 - SQL Injection
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
23RIESGO
abrir ↗Exploit-DB
ASRock Drivers - Privilege Escalation
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗Exploit-DB
Point of Sales (POS) in VB.Net MySQL Database 1.0 - SQL Injection
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
23RIESGO
abrir ↗Exploit-DB
PayPal-Credit Card-Debit Card Payment 1.0 - SQL Injection
The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=
23RIESGO
abrir ↗Exploit-DB
Curriculum Evaluation System 1.0 - SQL Injection
Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb
23RIESGO
abrir ↗Exploit-DB
SaltOS Erp Crm 3.1 r8126 - SQL Injection
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
28RIESGO
abrir ↗Exploit-DB
School Event Management System 1.0 - Arbitrary File Upload
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.
23RIESGO
abrir ↗Exploit-DB
SaltOS Erp Crm 3.1 r8126 - SQL Injection (2)
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
23RIESGO
abrir ↗Exploit-DB
SaltOS Erp Crm 3.1 r8126 - Database File Download
SaltOS 3.1 r8126 contains a database download vulnerability.
23RIESGO
abrir ↗Exploit-DB
ASRock Drivers - Privilege Escalation
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗Exploit-DB
Modbus Slave 7.0.0 - Denial of Service (PoC)
Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.
23RIESGO
abrir ↗Exploit-DB
E-Negosyo System 1.0 - SQL Injection
The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id=
23RIESGO
abrir ↗Exploit-DB
ASRock Drivers - Privilege Escalation
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗Exploit-DB
School Attendance Monitoring System 1.0 - Arbitrary File Upload
School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.
23RIESGO
abrir ↗GitHub PoC★ 1
kastellanos/CVE-2018-7602
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
100RIESGO
abrir ↗Exploit-DB
Bakeshop Inventory System in VB.Net and MS Access Database 1.0 - SQL Injection
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.
23RIESGO
abrir ↗Exploit-DB
School Attendance Monitoring System 1.0 - SQL Injection
Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.ph
23RIESGO
abrir ↗Exploit-DB
K-iwi Framework 1775 - SQL Injection
K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/up
23RIESGO
abrir ↗Exploit-DB
School Attendance Monitoring System 1.0 - Cross-Site Request Forgery (Update Admin)
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
systemd - 'chown_one()' Dereference Symlinks
systemd: chown_one() can dereference symlinks
41RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
systemd - 'reexec' State Injection
systemd: reexec state injection: fgets() on overlong lines leads to line splitting
41RIESGO
abrir ↗Exploit-DB
Paramiko 2.4.1 - Authentication Bypass
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x
28RIESGO
abrir ↗Exploit-DB
ASRock Drivers - Privilege Escalation
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.