Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
81.453 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler '.XML' Local Privilege Escalation (MS10-092) (Metasploit)
CVE-2010-3888—localwindows19 jul 2012
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.4 < 2.4.37.4 / 2.6.0 < 2.6.30.4 - 'Sendpage' Local Privilege Escalation (Metasploit)
CVE-2009-2692—locallinux19 jul 2012
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler '.XML' Local Privilege Escalation (MS10-092) (Metasploit)
CVE-2010-3338—localwindows19 jul 2012
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Barracuda SSL VPN - 'launchAgent.do?return-To' Cross-Site Scripting
CVE-2012-4739—remotehardware18 jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Barracuda SSL VPN - 'fileSystem.do' Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-4739—remotehardware18 jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote atta
23RIESGO
abrir ↗
Metasploit300
Cisco Linksys PlayerPT ActiveX Control SetSource sURL Argument Buffer Overflow
CVE-2012-0284—17 jul 2012
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.o
50RIESGO
abrir ↗
Exploit-DB
libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation
CVE-2012-3524—locallinux17 jul 2012
libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows
23RIESGO
abrir ↗
Exploit-DB
libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation
CVE-2012-4425—locallinux17 jul 2012
libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CakePHP 2.x < 2.2.0-RC2 - XML External Entity Injection
CVE-2012-4399—webappsphp16 jul 2012
The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via X
28RIESGO
abrir ↗
Metasploit300
WebPageTest Directory Traversal
CVE-2019-17199—13 jul 2012
www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of
18RIESGO
abrir ↗
Metasploit600
WebPageTest Arbitrary PHP File Upload
CVE-2012-10049CRITICAL13 jul 2012
WebPageTest Arbitrary PHP File Upload RCE
63RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WaveSurfer 1.8.8p4 - Memory Corruption (PoC)
CVE-2012-6303—doswindows12 jul 2012
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 9 / SharePoint / Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)
CVE-2012-1858—doswindows12 jul 2012
The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync
28RIESGO
abrir ↗
Exploit-DB
Reserve Logic 1.2 Booking CMS - Multiple Vulnerabilities
CVE-2010-4980—webappsphp12 jul 2012
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Hastymail 2.1.1 RC1 - Command Injection (Metasploit)
CVE-2011-4542—webappsphp12 jul 2012
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] paramet
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AdminStudio - 'LaunchHelp.dll' ActiveX Arbitrary Code Execution (Metasploit)
CVE-2011-2657—remotewindows11 jul 2012
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Laun
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Java Applet - Field Bytecode Verifier Cache Remote Code Execution (Metasploit)
CVE-2012-1723CRITICALbajo ataqueransomwareremotejava11 jul 2012
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Kajona - 'getAllPassedParams()' Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-3805—webappsphp11 jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution (Metasploit)
CVE-2012-3996—webappsphp09 jul 2012
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (
23RIESGO
abrir ↗
Metasploit300
HP Operations Agent Opcode coda.exe 0x8c Buffer Overflow
CVE-2012-2020—09 jul 2012
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RIESGO
abrir ↗
Metasploit300
HP Operations Agent Opcode coda.exe 0x34 Buffer Overflow
CVE-2012-2019—09 jul 2012
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution (Metasploit)
CVE-2012-0911—webappsphp09 jul 2012
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Basilic 1.5.14 - 'diff.php' Arbitrary Command Execution (Metasploit)
CVE-2012-3399—webappsphp09 jul 2012
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebsitePanel - 'ReturnUrl' Open Redirection
CVE-2012-4032—webappsasp09 jul 2012
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users t
43RIESGO
abrir ↗
Metasploit600
EGallery PHP File Upload Vulnerability
CVE-2012-10052CRITICAL08 jul 2012
EGallery 1.2 Arbitrary PHP File Upload
63RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Sling - Denial of Service
CVE-2012-2138—dosmultiple06 jul 2012
The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling do
28RIESGO
abrir ↗
Metasploit600
Sflog! CMS 1.0 Arbitrary File Upload Vulnerability
CVE-2012-10042HIGH06 jul 2012
Sflog! CMS 1.0 Arbitrary File Upload RCE
36RIESGO
abrir ↗
Exploit-DB
Webmatic 3.1.1 - Blind SQL Injection
CVE-2012-3350—webappsphp06 jul 2012
SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Rational ClearQuest CQOle - Remote Code Execution (Metasploit)
CVE-2012-0708—remotewindows05 jul 2012
Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 bef
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 3.2.24 - 'fs/eventpoll.c' Local Denial of Service
CVE-2012-3375—doslinux05 jul 2012
The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in E
23RIESGO
abrir ↗
← anteriorpágina 1177 / 2716siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.