Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
Scrutinizer 9.0.1.19899 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-3848—webappsphp30 jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutin
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2.18 - 'pbcontrol.php' Command Injection (Metasploit)
CVE-2012-2953—remotelinux27 jul 2012
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary comman
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow (ASLR + DEP Bypass)
CVE-2009-1328—localwindows27 jul 2012
Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'rds_recvmsg()' Local Information Disclosure
CVE-2012-3430—locallinux26 jul 2012
The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure mem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ISC DHCP 4.x - Multiple Denial of Service Vulnerabilities
CVE-2012-3571—doslinux25 jul 2012
ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinit
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - 'pbcontrol.php' Root Remote Code Execution
CVE-2012-2953—remotelinux24 jul 2012
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary comman
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Zabbix 2.0.1 - Session Extractor
CVE-2012-3435—webappsphp24 jul 2012
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - Local/Remote File Inclusion / Remote Command Execution
CVE-2012-2957—webappslinux24 jul 2012
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
CVE-2012-3835—webappsphp23 jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2 - 'blocked.php?id' Blind SQL Injection
CVE-2012-2574—webappslinux23 jul 2012
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attack
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection
CVE-2012-6658—webappswindows23 jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers
CVE-2012-2961—webappsphp23 jul 2012
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attack
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection
CVE-2012-2956—webappswindows23 jul 2012
SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
CVE-2012-3834—webappsphp23 jul 2012
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OS
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
CVE-2012-2599—webappsphp23 jul 2012
20RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution
CVE-2012-2601—webappsasp22 jul 2012
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Dell SonicWALL Scrutinizer 9.0.1 - 'statusFilter.php?q' SQL Injection
CVE-2012-2962—webappsphp22 jul 2012
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution
CVE-2012-2589—webappsasp22 jul 2012
20RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution
CVE-2012-4344—webappsasp22 jul 2012
Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin chenpress - Arbitrary File Upload
CVE-2012-2570—webappsphp21 jul 2012
Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities
CVE-2012-2577—webappswindows21 jul 2012
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
X-Cart Gold 4.5 - 'products_map.php?symb' Cross-Site Scripting
CVE-2012-2570—webappsphp21 jul 2012
Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AtMail Email Server Appliance 6.4 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Remote Code Execution
CVE-2012-2593—remotelinux21 jul 2012
Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities
CVE-2012-2602—webappswindows21 jul 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x4c Buffer Overflow (Metasploit)
CVE-2011-3175—remotewindows20 jul 2012
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Outside-In - '.FPX' File Parsing Heap Overflow
CVE-2012-1744—doswindows20 jul 2012
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x6c Buffer Overflow (Metasploit)
CVE-2011-3175—remotewindows20 jul 2012
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Outside-In JP2 - File Parsing Heap Overflow
CVE-2012-1769—doswindows20 jul 2012
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Outside-In - '.LWP' File Parsing Stack Buffer Overflow
CVE-2012-1770—doswindows20 jul 2012
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x4c Buffer Overflow (Metasploit)
CVE-2011-3176—remotewindows20 jul 2012
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
50RIESGO
abrir ↗
← anteriorpágina 121 / 636siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.