Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.859exploits catalogados
38.203CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.483Referência 24.469GitHub PoC 15.768VulnCheck XDB 9182Nuclei 4447Metasploit 3510✓ solo verificadosrecientespopularesriesgo
81.859 exploits
Exploit-DB✓ VexDay Proof
Apache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit)
CVE-2007-0774—remotewindows25 jul 2010
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apach
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TikiWiki jhot - Remote Command Execution (Metasploit)
CVE-2006-4602—webappsphp25 jul 2010
Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execu
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Remote Command Execution (Metasploit)
CVE-2005-2733—webappsphp25 jul 2010
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which cou
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI FrontPage 'fp30reg.dll' Chunked Overflow (MS03-051) (Metasploit)
CVE-2003-0822—remotewindows25 jul 2010
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - WebDAV 'ntdll.dll' Path Overflow (MS03-007) (Metasploit)
CVE-2003-0109—remotewindows25 jul 2010
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
vBulletin - 'misc.php' Template Name Arbitrary Code Execution (Metasploit)
CVE-2005-0511—webappsphp25 jul 2010
misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
XML-RPC Library 1.3.0 - 'xmlrpc.php' Arbitrary Code Execution (Metasploit)
CVE-2005-1921—webappsphp25 jul 2010
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft DNS RPC Service - 'extractQuotedChar()' TCP Overflow (MS07-029) (Metasploit)
CVE-2007-1748—remotewindows25 jul 2010
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 200
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - ASN.1 Library Bitstring Heap Overflow (MS04-007) (Metasploit)
CVE-2003-0818—remotewindows25 jul 2010
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microso
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Solaris - ypupdated Command Execution (Metasploit)
CVE-1999-0209—remotesolaris25 jul 2010
The SunView (SunTools) selection_svc facility allows remote users to read files.
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Message Queueing Service - DNS Name Path Overflow (MS07-065) (Metasploit)
CVE-2007-3039—remotewindows25 jul 2010
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Window
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI 'nsiislog.dll' ISAPI POST Overflow (MS03-022) (Metasploit)
CVE-2003-0349—remotewindows25 jul 2010
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AKY Blog - SQL Injection
CVE-2010-2922—webappsasp24 jul 2010
SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component Ozio Gallery - SQL Injection
CVE-2010-2910—webappsphp24 jul 2010
SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to execu
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Joomdle 0.24 - SQL Injection
CVE-2010-2908—webappsphp24 jul 2010
SQL injection vulnerability in the Joomdle (com_joomdle) component 0.24 and earlier for Joomla! allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
sNews 1.7 - 'index.php?category' SQL Injection
CVE-2010-2926—webappsphp24 jul 2010
SQL injection vulnerability in index.php in sNews 1.7 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component YouTube 1.5 - SQL Injection
CVE-2010-2923—webappsphp24 jul 2010
SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM AIX 5l - 'FTPd' Remote DES Hash
CVE-2010-3187—remoteaix24 jul 2010
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST com
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost PHP 4.6.5 - 'ecard.php' SQL Injection
CVE-2005-0929—webappsphp23 jul 2010
SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PhotoPost PHP 4.6.5 - 'ecard.php' SQL Injection
CVE-2004-0239—webappsphp23 jul 2010
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauth
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection
CVE-2010-2921—webappsphp23 jul 2010
SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla!
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Huru Helpdesk - SQL Injection (2)
CVE-2010-2907—webappsphp23 jul 2010
SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AJ HYIP MERIDIAN - 'news.php?id' Blind SQL Injection
CVE-2010-2916—webappsphp22 jul 2010
SQL injection vulnerability in news.php in AJ Square AJ HYIP MERIDIAN allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB
Free PHP Photo Gallery Script - Remote File Inclusion
CVE-2010-4948—webappsphp22 jul 2010
PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AJ HYIP PRIME - 'welcome.php?id' Blind SQL Injection
CVE-2010-2915—webappsphp22 jul 2010
SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin myLDlinker - SQL Injection
CVE-2010-2924—webappsphp22 jul 2010
SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ZipCentral - '.zip' Local Buffer Overflow (SEH)
CVE-2006-2439—localwindows21 jul 2010
Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
libpng 1.4.2 - Denial of Service
CVE-2010-1205—dosmultiple20 jul 2010
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow
CVE-2010-1214—remotelinux20 jul 2010
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remot
23RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager execvp_nc Buffer Overflow
CVE-2010-2703—20 jul 2010
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)
60RIESGO
abrir ↗
← anteriorpágina 1276 / 2729siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.