Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.759exploits catalogados
38.127CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.415GitHub PoC 15.736VulnCheck XDB 9171Nuclei 4446Metasploit 3509✓ solo verificadosrecientespopularesriesgo
81.759 exploits
Exploit-DB✓ VexDay Proof
Netautor Professional 5.5 - 'login2.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom (formerly Netautor P
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.4 - 'Plugin' EnsureCachedAttrParamArrays Remote Code Execution
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remot
23RIESGO
abrir ↗Metasploit300
Digital Music Pad Version 8.2.3.3.4 Stack Buffer Overflow
Digital Music Pad <= 8.2.3.3.4 Stack Buffer Overflow
36RIESGO
abrir ↗Metasploit400
BACnet OPC Client Buffer Overflow
Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Excel - HFPicture Record Parsing Remote Code Execution
Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.27 < 2.6.36 (RedHat x86-64) - 'compat' Local Privilege Escalation
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mojoportal - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mojoportal - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BACnet OPC Client - Local Buffer Overflow (1)
Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.36-rc4-git2 (x86-64) - 'ia32syscall' Emulation Privilege Escalation
The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP microcms 1.0.1 - Multiple Vulnerabilities
Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multple I-Escorts Products - 'escorts_search.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MP3 Workstation 9.2.1.1.2 - Local Overflow (SEH)
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eNdonesia 8.4 - SQL Injection
SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mollify 1.6 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP microcms 1.0.1 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Axigen Webmail 1.0.1 - Directory Traversal
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers
23RIESGO
abrir ↗GitHub PoC★ 4
sample exploit of buffer overflow in libpng
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
E-Xoopport Samsara 3.1 (Sections Module) - Blind SQL Injection
SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial modul
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PaysiteReviewCMS - 'image.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino iCalendar - Email Address Stack Buffer Overflow
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server i
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PaysiteReviewCMS 1.1 - 'search.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JGen 0.9.33 - SQL Injection
SQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗Metasploit600
MS10-061 Microsoft Print Spooler Service Impersonation Vulnerability
The Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windo
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.8 - 'Math.random()' Cross Domain Information Disclosure
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8,
23RIESGO
abrir ↗Metasploit300
Microsoft IIS 6.0 ASP Stack Exhaustion Denial of Service
Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0
50RIESGO
abrir ↗Metasploit300
IBM Lotus Domino iCalendar MAILTO Buffer Overflow
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server i
50RIESGO
abrir ↗Metasploit600
Windows Escalate Task Scheduler XML Privilege Escalation
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Group Office 3.5.9 - SQL Injection
SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kingsoft AntiVirus 2010.04.26.648 - Kernel Buffer Overflow
Buffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users to execute arbitrary co
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.