Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
84.035exploits catalogados
39.531CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientespopularesriesgo
24.485 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Project Log 1.5.3 - 'search' SQL Injection
SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Advertisement Board 3.1.0 - 'catname' SQL Injection
SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= requ
23RIESGO
abrir ↗Exploit-DB
JBoss Remoting 6.14.18 - Denial of Service
A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an e
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EPIC MyChart - X-Path Injection
XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing s
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Primavera P6 Enterprise Project Portfolio Management - HTTP Response Splitting
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ABRT - 'raceabrt' Privilege Escalation (Metasploit)
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impac
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'NewScObjectNoCtor' Array Type Confusion
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - Array Type Confusion via InitProto Instructions
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - Memory Corruption
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'Array.prototype.reverse' Array Type Confusion
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'GlobOpt::OptTagChecks' Must Consider IsLoopPrePass Properly (2)
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitra
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - ImplicitCallFlags Checks Bypass
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge Chakra JIT - 'LdThis' Type Confusion
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RIESGO
abrir ↗Exploit-DB
GNU binutils 2.26.1 - Integer Overflow (PoC)
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is af
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
28RIESGO
abrir ↗Exploit-DB
NAT32 2.2 Build 22284 - Remote Command Execution
A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, an
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is af
23RIESGO
abrir ↗Exploit-DB
Tenda AC15 Router - Remote Code Execution
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
23RIESGO
abrir ↗Exploit-DB
NAT32 2.2 Build 22284 - Cross-Site Request Forgery
A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell EMC Isilon OneFS - Multiple Vulnerabilities
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, an
23RIESGO
abrir ↗Exploit-DB
TypeSetter CMS 5.1 - 'Host' Header Injection
An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a m
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CloudMe Sync < 1.11.0 - Buffer Overflow
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy
60RIESGO
abrir ↗Exploit-DB
Advantech WebAccess 8.3.0 - Remote Code Execution
The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.