Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
84.035exploits catalogados
39.531CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9678Nuclei 4478Metasploit 3524✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
Ubisoft uplay 2.0.3 - ActiveX Control Arbitrary Code Execution (Metasploit)
The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Plixer Scrutinizer NetFlow and sFlow Analyzer 9 - Default MySQL Credential (Metasploit)
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwor
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail 6.0a4 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mailenable enterprise 6.5 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
xeams email server 4.4 build 5720 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Axigen Mail Server 8.0.1 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
T-dah Webmail Client 3.2.0-2.3 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Proventia Network Mail Security System 2.5 - POST File Read
Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PBBoard - 'admin.php?xml_name' Arbitrary PHP Code Execution
Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary P
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dir2web - '/system/src/dispatcher.php?oid' SQL Injection
SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alligra Calligra - Heap Buffer Overflow
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import f
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TCExam 11.2.x - '/admin/code/tce_edit_answer.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greate
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TCExam 11.2.x - '/admin/code/tce_edit_question.php?subject_module_id' SQL Injection
Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greate
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle AutoVue - ActiveX Control SetMarkupMode Buffer Overflow (Metasploit)
Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Open Constructor - 'confirm.php?q' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Open Constructor - '/data/file/edit.php?result' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Open Constructor - '/users/users.php?keyword' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Linksys PlayerPT - ActiveX Control SetSource sURL argument Buffer Overflow (Metasploit)
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.o
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell SonicWALL Scrutinizer 9 - SQL Injection (Metasploit)
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mahara 1.4.1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Fixed Table Col Span Heap Overflow (MS12-037) (Metasploit)
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.4.3 - PDO Memory Access Violation Denial of Service
pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end o
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eGlibc - Signedness Code Execution
Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office SharePoint Server 2007 - Remote Code Execution (MS10-104) (Metasploit)
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Serve
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer 9.0.1.19899 - HTTP Authentication Bypass
cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not requir
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - 'deptUploads_data.php?groupid' Blind SQL Injection
SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer 9.0.1.19899 - Arbitrary File Upload
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote at
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.