Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.924exploits catalogados
38.251CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.506Exploit-DB 24.485GitHub PoC 15.787VulnCheck XDB 9186Nuclei 4448Metasploit 3512✓ solo verificadosrecientespopularesriesgo
81.924 exploits
Exploit-DB
DynPG CMS 4.1.0 - 'popup.php' / 'counter.php' Multiple Vulnerabilities
CVE-2010-1299—webappsphp02 abr 2010
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' Local Overflow
CVE-2011-5165—localwindows02 abr 2010
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RIESGO
abrir ↗
Exploit-DB
CMS Made Simple 1.7 - Cross-Site Request Forgery
CVE-2010-3884—webappsphp02 abr 2010
Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack t
23RIESGO
abrir ↗
Exploit-DB
DynPG CMS 4.1.0 - Multiple Vulnerabilities
CVE-2010-1299—webappsphp01 abr 2010
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di
28RIESGO
abrir ↗
Exploit-DB
Joomla! Component Jvehicles - Local File Inclusion
CVE-2010-1873—webappsphp01 abr 2010
SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote at
23RIESGO
abrir ↗
Exploit-DB
Joomla! Component webERPcustomer - Local File Inclusion
CVE-2010-1315—webappsphp01 abr 2010
Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer) component 1.2.1 and 1
38RIESGO
abrir ↗
Exploit-DB
Joomla! Component User Status - Local File Inclusion
CVE-2010-1304—webappsphp01 abr 2010
Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! al
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TugZip 3.5 Archiver - '.ZIP' File Buffer Overflow
CVE-2008-4779—localwindows01 abr 2010
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Centreon IT & Network Monitoring 2.1.5 - SQL Injection
CVE-2010-1301—webappsphp31 mar 2010
SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component DW Graph - Local File Inclusion
CVE-2010-1302—webappsphp31 mar 2010
Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! a
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Reader - Escape From '.PDF' Execute Embedded Executable
CVE-2010-1240—localwindows31 mar 2010
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RIESGO
abrir ↗
Metasploit600
Java Statement.invoke() Trusted Method Chain Privilege Escalation
CVE-2010-0840CRITICALbajo ataque31 mar 2010
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18,
100RIESGO
abrir ↗
Metasploit600
Java RMIConnectionImpl Deserialization Privilege Escalation
CVE-2010-0094—31 mar 2010
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Piwik 0.5.5 - 'form_url' Cross-Site Scripting
CVE-2010-1453—webappsphp31 mar 2010
Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to injec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Reader - Escape From '.PDF' Execute Embedded Executable
CVE-2010-1239—localwindows31 mar 2010
Foxit Reader before 3.2.1.0401 allows remote attackers to (1) execute arbitrary local programs via a certain "/Type /Act
23RIESGO
abrir ↗
Exploit-DB
OpenDcHub 0.8.1 - Remote Code Execution
CVE-2010-1147—remotelinux31 mar 2010
Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' Local Stack Buffer Overflow
CVE-2011-5165—localwindows31 mar 2010
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RIESGO
abrir ↗
Metasploit300
Novell ZENworks Configuration Management Preboot Service 0x21 Buffer Overflow
CVE-2012-2215—30 mar 2010
Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1
23RIESGO
abrir ↗
Metasploit600
Novell ZENworks Configuration Management Remote Execution
CVE-2010-5324—30 mar 2010
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
60RIESGO
abrir ↗
Metasploit500
Java MixerSequencer Object GM_Song Structure Handling Vulnerability
CVE-2010-0842—30 mar 2010
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 - Multiple Local File
CVE-2010-1309—webappsphp30 mar 2010
Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary
23RIESGO
abrir ↗
Exploit-DB
HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Topic Overflow
CVE-2009-4178—remotewindows30 mar 2010
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Easy-Clanpage 2.1 - SQL Injection
CVE-2008-1425—webappsmultiple30 mar 2010
SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a
23RIESGO
abrir ↗
Exploit-DB
Yamamah 1.00 - Multiple Vulnerabilities
CVE-2010-2335—webappsphp30 mar 2010
SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote at
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow
CVE-2009-1642—localwindows30 mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Shadow Stream Recorder 3.0.1.7 - '.asx' Local Buffer Overflow
CVE-2009-1642—localwindows30 mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' (PoC)
CVE-2011-5165—doswindows30 mar 2010
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 - Multiple Local File
CVE-2008-7254—webappsphp30 mar 2010
Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, w
23RIESGO
abrir ↗
Exploit-DB
Yamamah 1.00 - Multiple Vulnerabilities
CVE-2010-1300—webappsphp30 mar 2010
SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASX to MP3 Converter 3.0.0.100 - Local Stack Overflow (PoC)
CVE-2009-1642—doswindows29 mar 2010
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RIESGO
abrir ↗
← anteriorpágina 1308 / 2731siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.