Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.003exploits catalogados
37.620CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.011GitHub PoC 15.501VulnCheck XDB 9077Nuclei 4427Metasploit 3505✓ solo verificadosrecientespopularesriesgo
81.003 exploits
Metasploit300
Wordpress XMLRPC DoS
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, doe
23RIESGO
abrir ↗Exploit-DB
Pro Chat Rooms 8.2.0 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated u
23RIESGO
abrir ↗Exploit-DB
Pro Chat Rooms 8.2.0 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote au
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection 11.x/12.x - Kernel Pool Overflow / Local Privilege Escalation
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,
23RIESGO
abrir ↗Metasploit0
HybridAuth install.php PHP Code Execution
HybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection
63RIESGO
abrir ↗Exploit-DB
Sphider Search Engine - Multiple Vulnerabilities
A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, whi
23RIESGO
abrir ↗Exploit-DB
Sphider Search Engine - Multiple Vulnerabilities
A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite
23RIESGO
abrir ↗Exploit-DB
Status2k Server Monitoring Software - Multiple Vulnerabilities
A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, wh
28RIESGO
abrir ↗Exploit-DB
Sphider Search Engine - Multiple Vulnerabilities
A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php,
23RIESGO
abrir ↗Exploit-DB
Status2k Server Monitoring Software - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via
23RIESGO
abrir ↗Exploit-DB
Sphider Search Engine - Multiple Vulnerabilities
A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could l
23RIESGO
abrir ↗Exploit-DB
Status2k Server Monitoring Software - Multiple Vulnerabilities
SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute
23RIESGO
abrir ↗Exploit-DB
ArticleFR 11.06.2014 - 'data.php' Privilege Escalation
A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restric
28RIESGO
abrir ↗Exploit-DB
Sphider Search Engine - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus al
23RIESGO
abrir ↗Exploit-DB
Status2k Server Monitoring Software - Multiple Vulnerabilities
Status2k does not remove the install directory allowing credential reset.
23RIESGO
abrir ↗Exploit-DB
Status2k Server Monitoring Software - Multiple Vulnerabilities
admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell me
23RIESGO
abrir ↗Exploit-DB
Sphider Search Engine - Multiple Vulnerabilities
A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let
23RIESGO
abrir ↗Exploit-DB
Status2k Server Monitoring Software - Multiple Vulnerabilities
Status2k allows Remote Command Execution in admin/options/editpl.php.
23RIESGO
abrir ↗Exploit-DB
Status2k Server Monitoring Software - Multiple Vulnerabilities
Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.p
23RIESGO
abrir ↗GitHub PoC★ 2
Technicolor TC7200 - Credentials Disclosure CVE : CVE-2014-1677
Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.
28RIESGO
abrir ↗Exploit-DB
D-Link DWR-113 Rev. Ax - Cross-Site Request Forgery / Denial of Service
Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin WhyDoWork AdSense - 'options-general.php' Cross-Site Request Forgery (Option Manipulation)
Cross-site request forgery (CSRF) vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sphider Search Engine 1.3.6 - Multiple Vulnerabilities
Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbi
23RIESGO
abrir ↗Exploit-DB
Oxwall 1.7.0 - Multiple Cross-Site Request Forgery / HTML Injection Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall 1.7.0 (build 7907 and 7906) and SkaDate Lite 2.0 (b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin FB Gorilla - 'game_play.php' SQL Injection
SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sphider Search Engine 1.3.6 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus al
23RIESGO
abrir ↗Exploit-DB
Ubiquiti UbiFi / mFi / AirVision - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Lead Octopus Power - 'id' SQL Injection
SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sphider Search Engine 1.3.6 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sphider Search Engine 1.3.6 - Multiple Vulnerabilities
SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.