Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
81.453 exploits
Exploit-DB
VideoLAN VLC Media Player 2.0.1 - '.mp4' Crash (PoC)
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicati
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung D6000 TV - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RIESGO
abrir ↗Metasploit300
Oracle TNS Listener Checker
The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.
40RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ownCloud 3.0.0 - 'index.php?redirect_url' Arbitrary Site Redirect
Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redire
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - '/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - '/modules/pm/pmlite.php?to_userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Metasploit300
Oracle AutoVue ActiveX Control SetMarkupMode Buffer Overflow
Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CyberLink Power2Go - name Attribute (p2g) Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to e
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Acuity CMS 2.6.2 - 'Username' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TeamPass 2.1.5 - 'login' HTML Injection
Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticat
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
V-CMS - Arbitrary '.PHP' File Upload / Execution (Metasploit)
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IrfanView FlashPix PlugIn - Decompression Heap Overflow
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Munin 2.0~rc4-1 - Remote Command Injection
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quest InTrust - Annotation Objects Uninitialized Pointer (Metasploit)
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prope
50RIESGO
abrir ↗Exploit-DB
Invision Power Board 3.3.0 - Local File Inclusion
Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sen
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EMC IRM License Server 4.6.1.1995 - Denial of Service
The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WICD 1.7.1 - Local Privilege Escalation
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configur
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EMC IRM License Server 4.6.1.1995 - Denial of Service
The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'agenda-widget-form.php?title' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'save_successful.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'box_publish_button.php?button_value' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'agenda-widget.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RIESGO
abrir ↗Metasploit200
MS12-027 MSCOMCTL ActiveX Buffer Overflow
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 - ActiveX RunAndUploadFile() Method Overflow (Metasploit)
Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provision
50RIESGO
abrir ↗Metasploit300
Samba SetInformationPolicy AuditEventsInfo Heap Overflow
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement valida
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Estate Agent - SQL Injection
SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.1.2.2 - Local Buffer Overflow
Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Snort 2 - DCE/RPC Preprocessor Buffer Overflow (Metasploit)
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire I
60RIESGO
abrir ↗Exploit-DB
ZTE - Change Admin Password
Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote atta
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.