Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
81.453 exploits
Exploit-DB✓ VexDay Proof
SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities
The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP
23RIESGO
abrir ↗Metasploit600
XODA 0.4.5 Arbitrary PHP File Upload Vulnerability
XODA 0.4.5 Arbitrary PHP File Upload
63RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 11.3 - Font Parsing Code Execution (Metasploit)
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on L
100RIESGO
abrir ↗Exploit-DB
IOServer 1.0.18.0 - Directory Traversal
Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks
23RIESGO
abrir ↗Exploit-DB
uebimiau webmail 2.7.2 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime plugin - Windows 4.1.2 (Japanese) Remote Overflow
Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
T-dah Webmail Client - Multiple Persistent Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Time Element Memory Corruption (MS11-050)
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 do
35RIESGO
abrir ↗Metasploit600
E-Mail Security Virtual Appliance learn-msg.cgi Command Injection
E-Mail Security Virtual Appliance learn-msg.cgi Command Injection
63RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Asset Management - Remote Execution (Metasploit)
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote at
60RIESGO
abrir ↗Exploit-DB
IBM Websphere MQ File Transfer Edition Web Gateway - Insufficient Access Control
The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users
23RIESGO
abrir ↗Exploit-DB
Viscosity - Local Privilege Escalation
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the se
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Total Shop UK eCommerce CodeIgniter - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in Tot
23RIESGO
abrir ↗Metasploit600
TestLink v1.9.3 Arbitrary File Upload Vulnerability
Multiple SQL injection vulnerabilities in TestLink 1.9.3, 1.8.5b, and earlier allow remote authenticated users with cert
18RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU glibc - Multiple Local Stack Buffer Overflow Vulnerabilities
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related func
23RIESGO
abrir ↗Metasploit600
Viscosity setuid-set ViscosityHelper Privilege Escalation
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the se
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (2)
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
23RIESGO
abrir ↗Metasploit600
Setuid Tunnelblick Privilege Escalation
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname o
38RIESGO
abrir ↗Exploit-DB
Solaris 10 Patch 137097-01 - Symlink Privilege Escalation
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (1)
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (2)
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname o
38RIESGO
abrir ↗Metasploit600
MobileCartly 1.0 Arbitrary File Creation Vulnerability
MobileCartly 1.0 savepage.php Arbitrary File Creation
63RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetDecision 4.2 - TFTP Writable Directory Traversal Execution (Metasploit)
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read
50RIESGO
abrir ↗Metasploit300
Adobe Flash Player 11.3 Kern Table Parsing Integer Overflow
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on L
100RIESGO
abrir ↗Metasploit600
Cyclope Employee Surveillance Solution v6 SQL Injection
Cyclope Employee Surveillance Solution v6.x SQL Injection
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Proventia Network Mail Security System 2.5 - POST File Read
Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.