Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
81.453 exploits
Exploit-DB
SIEMENS Sipass Integrated 2.6 Ethernet Bus - Arbitrary Pointer Dereference
CVE-2012-5409—doswindows01 nov 2012
AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages r
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Board (IP.Board) 3.3.4 - 'Unserialize()' PHP Code Execution
CVE-2012-5692—webappsphp01 nov 2012
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SolarWinds Orion IP Address Manager (IPAM) - 'search.aspx' Cross-Site Scripting
CVE-2012-4939—webappsasp31 oct 2012
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWi
23RIESGO
abrir ↗
Metasploit300
Axigen Arbitrary File Read and Delete
CVE-2012-4940—31 oct 2012
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote att
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Axigen Mail Server - 'Filename' Directory Traversal
CVE-2012-4940—remotewindows31 oct 2012
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote att
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Freefloat FTP Server - 'PUT' Remote Buffer Overflow
CVE-2012-5106—remotewindows30 oct 2012
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Operations Agent - Opcode 'coda.exe' 0x34 Buffer Overflow (Metasploit)
CVE-2012-2019—remotewindows29 oct 2012
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Operations Agent - Opcode 'coda.exe' 0x8c Buffer Overflow (Metasploit)
CVE-2012-2020—remotewindows29 oct 2012
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RIESGO
abrir ↗
Metasploit600
Invision IP.Board unserialize() PHP Code Execution
CVE-2012-5692—25 oct 2012
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Bitweaver 2.8.1 - Multiple Vulnerabilities
CVE-2012-5192—webappsphp24 oct 2012
Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to rea
50RIESGO
abrir ↗
Metasploit300
ClanSphere 2011.3 Local File Inclusion Vulnerability
CVE-2012-10034HIGH23 oct 2012
ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie
36RIESGO
abrir ↗
Metasploit300
Bitweaver overlay_type Directory Traversal
CVE-2012-5192—23 oct 2012
Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to rea
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
CVE-2012-5387—webappsphp22 oct 2012
Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordP
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
CVE-2012-5388—webappsphp22 oct 2012
Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remo
23RIESGO
abrir ↗
Exploit-DB
Movable Type Pro 5.13en - Persistent Cross-Site Scripting
CVE-2012-1503—webappsphp22 oct 2012
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
CVE-2012-4773—webappsphp22 oct 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack
23RIESGO
abrir ↗
Exploit-DB
ATutor 1.2 - Multiple Vulnerabilities
CVE-2012-5453—webappsphp22 oct 2012
SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
CVE-2012-4772—webappsphp22 oct 2012
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
CVE-2012-5452—webappsphp22 oct 2012
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Metasploit600
Mutiny Remote Command Execution
CVE-2012-3001—22 oct 2012
Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, re
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
CVE-2012-4771—webappsphp22 oct 2012
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Exploit-DB
ATutor 1.2 - Multiple Vulnerabilities
CVE-2012-5167—webappsphp22 oct 2012
Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebTitan - 'logs-x.php' Directory Traversal
CVE-2011-4640—webappsphp20 oct 2012
Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to r
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OTRS 3.1 - Persistent Cross-Site Scripting
CVE-2012-4600—webappswindows18 oct 2012
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befor
23RIESGO
abrir ↗
Exploit-DB
Oracle Database - Protocol Authentication Bypass
CVE-2012-3137—localmultiple18 oct 2012
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OTRS 3.1 - Persistent Cross-Site Scripting
CVE-2012-4751—webappswindows18 oct 2012
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befor
23RIESGO
abrir ↗
Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
CVE-2012-3185—webappsmultiple17 oct 2012
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RIESGO
abrir ↗
Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
CVE-2012-3183—webappsmultiple17 oct 2012
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RIESGO
abrir ↗
Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
CVE-2012-3184—webappsmultiple17 oct 2012
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RIESGO
abrir ↗
Metasploit300
Drupal OpenID External Entity Injection
CVE-2012-4554—17 oct 2012
The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE d
23RIESGO
abrir ↗
← anteriorpágina 1168 / 2716siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.