Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.305exploits catalogados
36.465CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities
The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 11.3 - Font Parsing Code Execution (Metasploit)
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on L
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime plugin - Windows 4.1.2 (Japanese) Remote Overflow
Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
T-dah Webmail Client - Multiple Persistent Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Time Element Memory Corruption (MS11-050)
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 do
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Asset Management - Remote Execution (Metasploit)
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote at
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU glibc - Multiple Local Stack Buffer Overflow Vulnerabilities
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related func
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Total Shop UK eCommerce CodeIgniter - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in Tot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (2)
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (1)
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (2)
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname o
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetDecision 4.2 - TFTP Writable Directory Traversal Execution (Metasploit)
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Plixer Scrutinizer NetFlow and sFlow Analyzer 9 - Default MySQL Credential (Metasploit)
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwor
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Proventia Network Mail Security System 2.5 - POST File Read
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mailtraq 2.17.3.3150 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
afterlogic mailsuite pro (VMware Appliance) 6.3 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
escon supportportal pro 3.0 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PBBoard - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpList 2.10.18 - 'index.php' SQL Injection
SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PBBoard - 'admin.php?xml_name' Arbitrary PHP Code Execution
Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary P
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpList 2.10.18 - 'unconfirmed' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin simplemail 1.0.6 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ubisoft uplay 2.0.3 - ActiveX Control Arbitrary Code Execution (Metasploit)
The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ManageEngine ServiceDesk Plus 8.1 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitr
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.