Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
81.453 exploits
Metasploit600
SPIP connect Parameter PHP Injection
CVE-2013-4557—04 jul 2012
The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, all
23RIESGO
abrir ↗
Metasploit600
Tiki Wiki unserialize() PHP Code Execution
CVE-2012-0911—04 jul 2012
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RIESGO
abrir ↗
Metasploit300
ALLMediaServer 0.8 Buffer Overflow
CVE-2017-17932—04 jul 2012
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
CVE-2012-0911—webappsphp04 jul 2012
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
CVE-2012-3996—webappsphp04 jul 2012
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (
23RIESGO
abrir ↗
Metasploit600
Wordpress Front-end Editor File Upload
CVE-2012-10019CRITICAL04 jul 2012
Front-end Editor < 2.3 - Arbitrary File Upload
63RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
gnome-terminal (vte) VteTerminal - Escape Sequence Parsing Remote Denial of Service
CVE-2012-2738—doslinux03 jul 2012
The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (lo
28RIESGO
abrir ↗
Exploit-DB
WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)
CVE-2012-4031—webappshardware02 jul 2012
Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attacke
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Data Protector - Create New Folder Buffer Overflow (Metasploit)
CVE-2012-0124—remotewindows01 jul 2012
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IrfanView JPEG2000 4.3.2.0 - jp2 Stack Buffer Overflow (Metasploit)
CVE-2012-0897—localwindows01 jul 2012
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute a
50RIESGO
abrir ↗
Exploit-DB
GIMP 2.8.0 - '.FIT' File Format Denial of Service
CVE-2012-3236—dosmultiple30 jun 2012
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
28RIESGO
abrir ↗
Exploit-DB
IrfanView JLS Formats PlugIn - Heap Overflow
CVE-2012-3585—doswindows30 jun 2012
Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns be
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
specview 2.5 build 853 - Directory Traversal
CVE-2012-5972—webappswindows29 jun 2012
SpecView Directory Traversal
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SWFupload - 'movieName' Cross-Site Scripting
CVE-2012-3414—webappsmultiple29 jun 2012
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before
23RIESGO
abrir ↗
Metasploit600
Basilic 1.5.14 diff.php Arbitrary Command Execution
CVE-2012-3399—28 jun 2012
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the
50RIESGO
abrir ↗
Metasploit600
Umbraco CMS Remote Command Execution
CVE-2012-10054CRITICAL28 jun 2012
Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
63RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Openfire Server 3.6.0a - Admin Console Authentication Bypass (Metasploit)
CVE-2008-6508—webappsjsp28 jun 2012
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows rem
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple QuickTime - TeXML Stack Buffer Overflow (Metasploit)
CVE-2012-0663—localwindows28 jun 2012
Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbit
43RIESGO
abrir ↗
Metasploit600
Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Execution
CVE-2012-3811—28 jun 2012
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4356—doswindows27 jun 2012
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA bef
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4353—doswindows27 jun 2012
Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA befor
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4354—doswindows27 jun 2012
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote at
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4355—doswindows27 jun 2012
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote at
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec pcAnywhere 12.5.0 - 'Login' / 'Password' Remote Buffer Overflow
CVE-2011-3478—remotewindows27 jun 2012
The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-4357—doswindows27 jun 2012
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow rem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
CVE-2012-3815—doswindows27 jun 2012
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 al
50RIESGO
abrir ↗
Exploit-DB
Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure
CVE-2012-3363CRITICALwebappsphp27 jun 2012
Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement clas
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
CVE-2012-0298—webappslinux27 jun 2012
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
CVE-2012-0297—webappslinux27 jun 2012
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,
60RIESGO
abrir ↗
Metasploit600
KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
CVE-2012-2516—26 jun 2012
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Pl
50RIESGO
abrir ↗
← anteriorpágina 1178 / 2716siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.