Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
80.842exploits catalogados
37.493CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 23.901GitHub PoC 15.465VulnCheck XDB 9066Nuclei 4426Metasploit 3502✓ solo verificadosrecientespopularesriesgo
80.842 exploits
Exploit-DB
PMB 4.1.3 - (Authenticated) SQL Injection
SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users
23RIESGO
abrir ↗Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php s
23RIESGO
abrir ↗Exploit-DB
Easy File Sharing Web Server 6.8 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote atta
23RIESGO
abrir ↗Exploit-DB
GParted 0.14.1 - OS Command Execution
GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in
23RIESGO
abrir ↗Exploit-DB
NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote atta
23RIESGO
abrir ↗Exploit-DB
PHPMyRecipes 1.2.2 - 'browse.php?category' SQL Injection
SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB
NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers
23RIESGO
abrir ↗Exploit-DB
SysAid Server - Arbitrary File Disclosure
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files
23RIESGO
abrir ↗Exploit-DB
PsychoStats < 2.2.4 Beta - Cross Site Scripting
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Notepad++ 6.6.9 - Buffer Overflow
Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long Time attribute in an Ev
28RIESGO
abrir ↗Exploit-DB
GQ File Manager 0.2.5 - Multiple Vulnerabilities
SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to exec
23RIESGO
abrir ↗Exploit-DB
ProjectSend r561 - Multiple Vulnerabilities
cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the
23RIESGO
abrir ↗Exploit-DB
Codiad 2.4.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB
Cacti Superlinks Plugin 1.4-2 - SQL Injection / Local File Inclusion
SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB
Codiad 2.4.3 - Multiple Vulnerabilities
Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read
23RIESGO
abrir ↗Exploit-DB
MiniBB 3.1 - Blind SQL Injection
bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to c
23RIESGO
abrir ↗Exploit-DB
Ettercap 0.8.0 < 0.8.1 - Multiple Denial of Service Vulnerabilities
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 a
28RIESGO
abrir ↗Exploit-DB
Varnish Cache CLI Interface - Remote Code Execution (Metasploit)
The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy serve
50RIESGO
abrir ↗Exploit-DB
ProjectSend r561 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GIT 1.8.5.6/1.9.5/2.0.5/2.1.4/2.2.1 & Mercurial < 3.2.3 - Multiple Vulnerabilities (Metasploit)
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbi
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GIT 1.8.5.6/1.9.5/2.0.5/2.1.4/2.2.1 & Mercurial < 3.2.3 - Multiple Vulnerabilities (Metasploit)
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderb
60RIESGO
abrir ↗Metasploit300
Achat Unicode SEH Buffer Overflow
Achat v0.150 SEH Buffer Overflow via UDP
63RIESGO
abrir ↗Metasploit600
Malicious Git and Mercurial HTTP Server For CVE-2014-9390
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS
40RIESGO
abrir ↗Metasploit300
Allegro Software RomPager 'Misfortune Cookie' (CVE-2014-9222) Scanner
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows re
30RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.