Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.759exploits catalogados
38.127CVEs con explotación pública
24.695probados en laboratorio
81.759 exploits
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'Snmp.exe' CGI Buffer Overflow (Metasploit)
CVE-2009-3849—remotecgi11 nov 2010
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote att
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xlink FTP Client - Remote Buffer Overflow (Metasploit)
CVE-2006-5792—remotewindows11 nov 2010
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xlink FTP Server - Remote Buffer Overflow (Metasploit)
CVE-2006-5792—remotewindows11 nov 2010
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Opera historysearch - Cross-Site Scripting (Metasploit)
CVE-2008-4696—remotemultiple11 nov 2010
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary w
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'ovalarm.exe' CGI Buffer Overflow (Metasploit)
CVE-2009-4179—remotewindows11 nov 2010
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remo
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Electronic Arts SnoopyCtrl - ActiveX Control Buffer Overflow (Metasploit)
CVE-2007-4466—remotewindows11 nov 2010
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attac
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Directory Services - Memory Corruption
CVE-2010-1840—dososx11 nov 2010
Stack-based buffer overflow in the password-validation functionality in Directory Services in Apple Mac OS X 10.5.8 and
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CA eTrust PestPatrol - ActiveX Control Buffer Overflow (Metasploit)
CVE-2009-4225—remotewindows11 nov 2010
Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Symantec ConsoleUtilities - ActiveX Control Buffer Overflow (Metasploit)
CVE-2009-3031—remotewindows11 nov 2010
Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Access Support - ActiveX Control Buffer Overflow (Metasploit)
CVE-2009-0215—remotewindows11 nov 2010
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dist
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Buffer Overflow (Metasploit)
CVE-2009-4178—remotewindows11 nov 2010
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Exchange Server 2000 - XEXCH50 Heap Overflow (MS03-046) (Metasploit)
CVE-2003-0714—remotewindows11 nov 2010
The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple iTunes 8.1.1 (Mac OSX) - ITms Overflow (Metasploit)
CVE-2009-0950—remoteosx11 nov 2010
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
POP Peeper 3.4 - DATE Buffer Overflow (Metasploit)
CVE-2009-1029—remotewindows11 nov 2010
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Lotus Domino Web Server - Accept-Language Stack Buffer Overflow (Metasploit)
CVE-2008-2240—remotewindows11 nov 2010
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Persits XUpload - ActiveX MakeHttpRequest Directory Traversal (Metasploit)
CVE-2009-3693—remotewindows11 nov 2010
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows rem
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Omni-NFS Server - Remote Buffer Overflow (Metasploit)
CVE-2006-5780—remotewindows11 nov 2010
Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code v
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
VUPlayer - '.m3u' Local Buffer Overflow (Metasploit)
CVE-2006-6251—localwindows11 nov 2010
Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AIX Calendar Manager Service Daemon (rpc.cmsd) Opcode 21 - Buffer Overflow (Metasploit)
CVE-2009-3699—dosaix11 nov 2010
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPShop 2.1 EE - 'name_new' Cross-Site Scripting
CVE-2010-4836—webappsphp10 nov 2010
Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to injec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WeBid 0.85P1 - Multiple Input Validation Vulnerabilities
CVE-2010-4873—webappsphp10 nov 2010
Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JQuarks4s 1.0.0 - Blind SQL Injection
CVE-2010-4638—webappsphp09 nov 2010
SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0
23RIESGO
abrir ↗
Metasploit500
MS10-087 Microsoft Word RTF pFragments Stack Buffer Overflow (File Format)
CVE-2010-3333HIGHbajo ataque09 nov 2010
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2
100RIESGO
abrir ↗
Exploit-DB
IBM OmniFind - Local Privilege Escalation
CVE-2010-4236—localmultiple09 nov 2010
Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to
23RIESGO
abrir ↗
Exploit-DB
IBM OmniFind - Buffer Overflow
CVE-2010-3894—dosmultiple09 nov 2010
Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.crypt
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'net/core/filter.c' Local Information Disclosure
CVE-2010-4158—locallinux09 nov 2010
The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain mem
23RIESGO
abrir ↗
Exploit-DB
IBM OmniFind - Local Privilege Escalation
CVE-2010-3895—localmultiple09 nov 2010
esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitr
23RIESGO
abrir ↗
Exploit-DB
IBM OmniFind - Cross-Site Request Forgery
CVE-2010-3891—webappsmultiple09 nov 2010
Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind En
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise Internet Agent - IMAP 'LIST' Remote Code Execution
CVE-2010-4711—doslinux09 nov 2010
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.0
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise Internet Agent - IMAP 'LIST LSUB' Remote Code Execution
CVE-2010-4717—doslinux09 nov 2010
Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWis
23RIESGO
abrir ↗
← anteriorpágina 1252 / 2726siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.