Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.524exploits catalogados
37.962CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.284GitHub PoC 15.675VulnCheck XDB 9136Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
81.524 exploits
Exploit-DB
Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities
CVE-2010-4804—webappsandroid28 nov 2011
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// UR
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4875—doswindows28 nov 2011
Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting
CVE-2011-5179—webappsphp28 nov 2011
Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly befor
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4877—doswindows28 nov 2011
HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4532—doswindows28 nov 2011
Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical use
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4529—doswindows28 nov 2011
Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to
23RIESGO
abrir ↗
Metasploit600
V-CMS PHP File Upload and Execute
CVE-2011-4828—27 nov 2011
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-5177—webappsphp26 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attacke
23RIESGO
abrir ↗
Metasploit300
Yaws Web Server Directory Traversal
CVE-2011-4350—25 nov 2011
Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user cou
23RIESGO
abrir ↗
Exploit-DB
PHP video script - SQL Injection
CVE-2011-5103—webappsphp25 nov 2011
SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
XChat 2.8.9 - Heap Overflow Denial of Service
CVE-2011-5129—doslinux25 nov 2011
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and p
23RIESGO
abrir ↗
Exploit-DB
LibLime Koha 4.2 - Local File Inclusion
CVE-2011-4715—webappscgi24 nov 2011
Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AdaptCMS 2.0 - SQL Injection
CVE-2011-5108—webappsphp24 nov 2011
Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Balitbang CMS 3.3 - 'index.php?hal' SQL Injection
CVE-2011-5111—webappsphp24 nov 2011
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/statuspoll.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - '/nnm/mibdiscover?node' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Zabbix 1.8.4 - 'popup.php' SQL Injection
CVE-2011-4674—webappsphp24 nov 2011
SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows rem
23RIESGO
abrir ↗
Exploit-DB
Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution
CVE-2011-4825—webappsphp24 nov 2011
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache 7.0.x mod_proxy - Reverse Proxy Security Bypass
CVE-2011-4317—remotelinux24 nov 2011
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, whe
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/ping.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection
CVE-2011-5111—webappsphp24 nov 2011
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/traceroute.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/configurationpoll.jsp?nodename' Cross-Site Scripting
CVE-2011-5184—webappsjsp24 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Dolibarr ERP/CRM 3.1.0 - '/admin/boxes.php?rowid' SQL Injection
CVE-2011-4802—webappsphp23 nov 2011
Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PrestaShop 1.4.4.1 - '/admin/ajaxfilemanager/ajax_save_text.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-4544—webappsphp23 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in Prestashop before 1.5 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-4567—webappsphp23 nov 2011
Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) - Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-4544—webappsphp23 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in Prestashop before 1.5 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
bzexe (bzip2) - Race Condition
CVE-2011-4089—locallinux23 nov 2011
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary file
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Dolibarr ERP/CRM 3.1 - Multiple Script URI Cross-Site Scripting Vulnerabilities
CVE-2011-4814—webappsphp23 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Featurific For WordPress 1.6.2 - 'snum' Cross-Site Scripting
CVE-2011-5265—webappsphp23 nov 2011
Cross-site scripting (XSS) vulnerability in cached_image.php in the Featurific For WordPress plugin 1.6.2 for WordPress
38RIESGO
abrir ↗
← anteriorpágina 1213 / 2718siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.