Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
81.453 exploits
Exploit-DB
RuggedCom Devices - Backdoor Access
RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Ad
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component CCNewsLetter 1.0.7 - 'id' SQL Injection
SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for
23RIESGO
abrir ↗Exploit-DB
Havalite CMS 1.0.4 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbit
23RIESGO
abrir ↗Metasploit600
WebCalendar 1.2.4 Pre-Auth Remote Code Injection
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user
60RIESGO
abrir ↗Exploit-DB
Havalite CMS 1.0.4 - Multiple Vulnerabilities
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebCalendar 1.2.4 - Remote Code Execution
Local file inclusion in WebCalendar before 1.2.5.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
28RIESGO
abrir ↗Exploit-DB
Oracle GlassFish Server 3.1.1 (build 12) - Multiple Cross-Site Scripting Vulnerabilities
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative siz
23RIESGO
abrir ↗Exploit-DB
Oracle GlassFish Server - REST Cross-Site Request Forgery
Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vTiger CRM 5.1.0 - Local File Inclusion
Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v
23RIESGO
abrir ↗Metasploit300
Samsung NET-i Viewer Multiple ActiveX BackupToAvi() Remote Overflow
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - ActionScript Launch Command Execution (Metasploit)
Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TFTP Server 1.4 - ST WRQ Buffer Overflow (Metasploit)
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or ex
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL - ASN1 BIO Memory Corruption
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL - ASN1 BIO Memory Corruption
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - 'call_dissector()' Null Pointer Dereference Denial of Service
epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows r
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and pos
23RIESGO
abrir ↗Exploit-DB
Microsoft Windows - 'afd.sys' Local Kernel (PoC) (MS11-046)
The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung D6000 TV - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
28RIESGO
abrir ↗Exploit-DB
VideoLAN VLC Media Player 2.0.1 - '.mp4' Crash (PoC)
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicati
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.