Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.524exploits catalogados
37.962CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.284GitHub PoC 15.675VulnCheck XDB 9136Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
81.524 exploits
Exploit-DB✓ VexDay Proof
GreenBrowser 6.0.1002 - Search Bar Short Cut Button Double-Free Remote Memory Corruption
CVE-2012-6041—remotewindows12 ene 2012
Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Count Per Day - Multiple Vulnerabilities
CVE-2012-0896—webappsphp12 ene 2012
Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remo
43RIESGO
abrir ↗
Metasploit200
HP Diagnostics Server magentservice.exe Overflow
CVE-2011-4789—12 ene 2012
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attac
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.39 < 3.2.2 (x86/x64) - 'Mempodipper' Local Privilege Escalation (2)
CVE-2012-0056—locallinux12 ene 2012
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Advanced Image Hosting Script - SQL Injection
CVE-2012-6039—webappsphp12 ene 2012
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable 6.02 - 'ForgottonPassword.aspx' Cross-Site Scripting
CVE-2012-0389—webappsasp12 ene 2012
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Count Per Day - Multiple Vulnerabilities
CVE-2012-0895—webappsphp12 ene 2012
Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
KnowledgeTree 3.x - Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-0988—webappsphp11 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earl
23RIESGO
abrir ↗
Exploit-DB
Apache 2.2 - Scoreboard Invalid Free On Shutdown
CVE-2012-0031—doslinux11 ene 2012
scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon c
23RIESGO
abrir ↗
Metasploit500
HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution
CVE-2011-4786—11 ene 2012
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to
50RIESGO
abrir ↗
Metasploit300
NTR ActiveX Control StopModule() Remote Code Execution
CVE-2012-0267—11 ene 2012
The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a
50RIESGO
abrir ↗
Metasploit300
NTR ActiveX Control Check() Method Buffer Overflow
CVE-2012-0266—11 ene 2012
Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitr
50RIESGO
abrir ↗
Metasploit600
MS12-005 Microsoft Office ClickOnce Unsafe Object Package Handling Vulnerability
CVE-2012-0013—10 ene 2012
Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Se
60RIESGO
abrir ↗
Metasploit300
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
CVE-2012-0003HIGH10 ene 2012
Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows
68RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Age Verification 0.4 - Open Redirect
CVE-2012-6499—webappsphp10 ene 2012
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow
CVE-2008-1611—remotewindows10 ene 2012
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or ex
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Fusion 7.2.4 - 'downloads.php' Cross-Site Scripting
CVE-2012-6043—webappsphp10 ene 2012
Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RazorCMS 1.2 - Directory Traversal
CVE-2012-6038—webappsphp10 ene 2012
admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directorie
23RIESGO
abrir ↗
Exploit-DB
w-CMS 2.01 - Multiple Vulnerabilities
CVE-2012-6523—webappsphp10 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Wireshark - Buffer Underflow / Denial of Service
CVE-2012-0067—doslinux10 ene 2012
wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of s
23RIESGO
abrir ↗
Exploit-DB
Pragyan CMS 3.0 - Remote File Disclosure
CVE-2012-6500—webappsphp10 ene 2012
Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft AntiXSS 3/4.0 Library Sanitization Module - Security Bypass
CVE-2012-0007—remotewindows10 ene 2012
The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the de
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RazorCMS 1.2 - Directory Traversal
CVE-2012-5918—webappsphp10 ene 2012
razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Age Verification 0.4 - 'redirect_to' Open Redirection
CVE-2012-6499—webappsphp10 ene 2012
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows
43RIESGO
abrir ↗
Exploit-DB
w-CMS 2.01 - Multiple Vulnerabilities
CVE-2012-6522—webappsphp10 ene 2012
Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Netware - XNFS caller_name xdrDecodeString Remote Code Execution
CVE-2011-4191—dosnetware10 ene 2012
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attacker
28RIESGO
abrir ↗
Exploit-DB
Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) - Remote File Disclosure
CVE-2012-1025—webappslinux09 ene 2012
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Clipbucket 2.6 - 'videos.php?time' SQL Injection
CVE-2012-6643—webappsphp09 ene 2012
Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Clipbucket 2.6 - 'collections.php?cat' Cross-Site Scripting
CVE-2012-6644—webappsphp09 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Marinet CMS - 'galleryphoto.php?id' SQL Injection
CVE-2012-6529—webappsphp09 ene 2012
Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the i
23RIESGO
abrir ↗
← anteriorpágina 1205 / 2718siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.