Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.035exploits catalogados

39.531CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientes populares riesgo

3524 exploits

Metasploit300

Check For and Prep the Pyrotechnic Devices (Airbags, Battery Clamps, etc.)

CVE-2017-14937—

The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to th

18RIESGO

abrir ↗

Metasploit300

Linux DoS Xen 4.2.0 2012-5525

CVE-2012-5525—

The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service

18RIESGO

abrir ↗

Metasploit300

Netlogon Weak Cryptographic Authentication

CVE-2020-1472MEDIUMbajo ataqueransomware

Netlogon Elevation of Privilege Vulnerability

100RIESGO

abrir ↗

Metasploit300

Haserl Arbitrary File Reader

CVE-2021-29133—

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to

18RIESGO

abrir ↗

Metasploit300

Veritas Backup Exec Server Registry Access

CVE-2005-0771—

VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify

30RIESGO

abrir ↗

Metasploit300

Veritas Backup Exec Windows Remote File Access

CVE-2005-2611—

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for

60RIESGO

abrir ↗

Metasploit300

Android Browser RCE Through Google Play Store XFO

CVE-2014-6041—

The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribu

23RIESGO

abrir ↗

Metasploit300

Diagnostics Agent in Solution Manager, stores unencrypted credentials for Solution Manager server

CVE-2019-0307—

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as So

18RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2019-15949HIGHbajo ataque

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios

100RIESGO

abrir ↗

Metasploit300

Dahua DVR Auth Bypass Scanner

CVE-2013-6117—

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio

50RIESGO

abrir ↗

Metasploit300

Multiple DVR Manufacturers Configuration Disclosure

CVE-2013-1391—

Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Wel

60RIESGO

abrir ↗

Metasploit300

EasyCafe Server Remote File Access

CVE-2025-34119HIGH

EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43

36RIESGO

abrir ↗

Metasploit300

Brocade Enable Login Check Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5791—

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

60RIESGO

abrir ↗

Metasploit300

Telnet Service Encryption Key ID Overflow Detection

CVE-2011-4862—

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka k

60RIESGO

abrir ↗

Metasploit300

Telnet Login Check Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5792—

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user

30RIESGO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-35578—

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature

60RIESGO

abrir ↗

Metasploit300

MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure

CVE-2015-1635CRITICALbajo ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RIESGO

abrir ↗

Metasploit300

RuggedCom Telnet Password Generator

CVE-2012-1803—

RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Ad

50RIESGO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1535—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-

60RIESGO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1122—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode U

60RIESGO

abrir ↗

Metasploit300

UDP Amplification Scanner

CVE-2013-5211—

The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service

60RIESGO

abrir ↗

Metasploit300

SSDP ssdp:all M-SEARCH Amplification Scanner

CVE-2013-5211—

The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service

60RIESGO

abrir ↗

Metasploit300

UPnP SSDP M-SEARCH Information Discovery

CVE-2012-5958—

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable

60RIESGO

abrir ↗

Metasploit300

UPnP SSDP M-SEARCH Information Discovery

CVE-2013-0230—

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP

50RIESGO

abrir ↗

Metasploit300

UPnP SSDP M-SEARCH Information Discovery

CVE-2012-5959—

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable

60RIESGO

abrir ↗

Metasploit300

Meteocontrol WEBlog Password Extractor

CVE-2016-2298—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext info

23RIESGO

abrir ↗

Metasploit300

Meteocontrol WEBlog Password Extractor

CVE-2016-2296—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pag

50RIESGO

abrir ↗

Metasploit300

UPnP SSDP M-SEARCH Information Discovery

CVE-2013-0229—

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attacke

60RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.