Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.192exploits catalogados
37.765CVEs con explotación pública
24.695probados en laboratorio
81.192 exploits
Exploit-DBVexDay Proof
Sophos Web Protection Appliance - clear_keys.pl Privilege Escalation (Metasploit)
CVE-2013-4984locallinux17 sep 2013
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1
38RIESGO
abrir
Exploit-DB
Oracle Java - 'ShortComponentRaster.verify()' Memory Corruption
CVE-2013-2472remotewindows17 sep 2013
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 U
28RIESGO
abrir
Exploit-DBVexDay Proof
Vino VNC Server 3.7.3 - Persistent Denial of Service
CVE-2013-5745doslinux17 sep 2013
The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8
23RIESGO
abrir
Exploit-DBVexDay Proof
Mozilla Firefox 9.0.1 - Same Origin Policy Security Bypass
CVE-2013-1727remotemultiple17 sep 2013
Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross
23RIESGO
abrir
Exploit-DB
PCMan FTP Server 2.07 - 'STOR' Remote Stack Overflow (Metasploit)
CVE-2013-4730remotewindows17 sep 2013
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RIESGO
abrir
Exploit-DBVexDay Proof
HP ProCurve Manager - SNAC UpdateDomainControllerServlet Arbitrary File Upload (Metasploit)
CVE-2013-4811remotewindows17 sep 2013
UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4
60RIESGO
abrir
Metasploit600
OpenEMR 4.1.1 Patch 14 SQLi Privilege Escalation Remote Code Execution
CVE-2013-10044HIGH16 sep 2013
OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE
36RIESGO
abrir
Exploit-DB
Mitsubishi MC-WorkX 8.02 - ActiveX Control 'IcoLaunch' File Execution
CVE-2013-2817remotewindows15 sep 2013
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote att
23RIESGO
abrir
Exploit-DBVexDay Proof
Zimplit CMS 3.0 - Multiple Vulnerabilities
CVE-2010-4513webappsphp13 sep 2013
Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to
23RIESGO
abrir
Exploit-DB
Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling (MS13-067)
CVE-2013-3179webappswindows12 sep 2013
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remo
28RIESGO
abrir
Metasploit0
GLPI install.php Remote Command Execution
CVE-2013-569612 sep 2013
inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installati
38RIESGO
abrir
Exploit-DB
D-Link DSL-2740B - Multiple Cross-Site Request Forgery Vulnerabilities
CVE-2013-5730webappshardware12 sep 2013
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remot
23RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3153remotewindows10 sep 2013
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3163HIGHbajo ataqueremotewindows10 sep 2013
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
100RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3148remotewindows10 sep 2013
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3115remotewindows10 sep 2013
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3149remotewindows10 sep 2013
Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memo
28RIESGO
abrir
Exploit-DBVexDay Proof
AjaXplorer 1.0 - Multiple Vulnerabilities
CVE-2013-5689webappsphp10 sep 2013
20RIESGO
abrir
Exploit-DBVexDay Proof
AjaXplorer 1.0 - Multiple Vulnerabilities
CVE-2013-5688webappsphp10 sep 2013
Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated use
23RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3164remotewindows10 sep 2013
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3143remotewindows10 sep 2013
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem
35RIESGO
abrir
Exploit-DBVexDay Proof
HP SiteScope (Windows) - Remote Code Execution (Metasploit)
CVE-2013-2367remotewindows10 sep 2013
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execu
50RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3151remotewindows10 sep 2013
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3166remotewindows10 sep 2013
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject a
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3150remotewindows10 sep 2013
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3846remotewindows10 sep 2013
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code o
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3146remotewindows10 sep 2013
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
28RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3145remotewindows10 sep 2013
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RIESGO
abrir
Metasploit600
MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution
CVE-2013-0810HIGH10 sep 2013
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote a
68RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
CVE-2013-3152remotewindows10 sep 2013
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
28RIESGO
abrir
anteriorpágina 1130 / 2707siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.