Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

82.081exploits catalogados
38.339CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.566Exploit-DB 24.485GitHub PoC 15.863VulnCheck XDB 9205Nuclei 4449Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.081 exploits
Metasploit400
Xlink FTP Server Buffer Overflow
CVE-2006-5792—03 oct 2009
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RIESGO
abrir ↗
Metasploit300
Xlink FTP Client Buffer Overflow
CVE-2006-5792—03 oct 2009
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Hyperic HQ 3.2 < 4.2-beta1 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2009-2898—webappsjsp02 oct 2009
Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation
CVE-2009-3281—localosx02 oct 2009
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allow
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AOL 9.1 SuperBuddy - ActiveX Control Remote code Execution
CVE-2009-3658—remotewindows01 oct 2009
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities
CVE-2009-3573—remotewindows01 oct 2009
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Capt
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP LoadRunner 9.5 - Remote file creation (PoC)
CVE-2009-3693—doswindows29 sep 2009
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows rem
50RIESGO
abrir ↗
Metasploit600
Persits XUpload ActiveX MakeHttpRequest Directory Traversal
CVE-2009-3693—29 sep 2009
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows rem
50RIESGO
abrir ↗
Metasploit500
InterSystems Cache UtilConfigHome.csp Argument Buffer Overflow
CVE-2009-20005CRITICAL29 sep 2009
InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow
63RIESGO
abrir ↗
Metasploit200
EMC ApplicationXtender (KeyWorks) ActiveX Control Buffer Overflow
CVE-2012-2515—29 sep 2009
Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHel
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Interspire Knowledge Manager 5 - 'p' Directory Traversal
CVE-2009-4192—webappsphp29 sep 2009
Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Installation Manager 1.3.0 - 'iim://' URI handler
CVE-2009-3518—remotewindows29 sep 2009
Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Kaspersky AV 2010 9.0.0.463 - Local Denial of Service
CVE-2009-4114—doswindows29 sep 2009
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation
CVE-2009-3489—localwindows29 sep 2009
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, whi
23RIESGO
abrir ↗
Metasploit600
WinRAR Filename Spoofing
CVE-2014-125119HIGH28 sep 2009
WinRAR < 5.00 Filename Spoofing RCE
36RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HEAT Call Logging 8.01 - SQL Injection
CVE-2009-3642—webappsasp28 sep 2009
Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to exe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
html2ps - 'include file' Server-Side Include Directive Directory Traversal
CVE-2009-5067—webappsmultiple25 sep 2009
Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Core FTP LE 2.1 build 1612 - Local Buffer Overflow (PoC)
CVE-2009-3484—doswindows25 sep 2009
Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code v
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xen 3.x - pygrub Local Authentication Bypass
CVE-2009-3525—locallinux25 sep 2009
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-vir
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure
CVE-2009-3457—remotehardware25 sep 2009
Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Audio Workstation - '.pls' Local Buffer Overflow (SEH)
CVE-2009-0476—localwindows24 sep 2009
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
e107 0.7.16 - Referer header Cross-Site Scripting
CVE-2009-3444—webappsphp24 sep 2009
Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Fastball 1.1.0 < 1.2 - 'league' SQL Injection
CVE-2009-3443—webappsphp24 sep 2009
SQL injection vulnerability in the Fastball (com_fastball) component 1.1.0 through 1.2 for Joomla! allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OSSIM 2.1 - SQL Injection / Cross-Site Scripting
CVE-2009-3440—webappsphp23 sep 2009
Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OSSIM 2.1 - SQL Injection / Cross-Site Scripting
CVE-2009-3439—webappsphp23 sep 2009
Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting
CVE-2009-3469—webappsjava23 sep 2009
Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Nginx 0.7.61 - WebDAV Directory Traversal
CVE-2009-3898—remotemultiple23 sep 2009
Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0
28RIESGO
abrir ↗
Metasploit500
Vermillion FTP Daemon PORT Command Memory Corruption
CVE-2010-20115CRITICAL23 sep 2009
Vermillion FTP <= 1.31 Daemon PORT Command Memory Corruption
43RIESGO
abrir ↗
Metasploit600
Adobe RoboHelp Server 8 Arbitrary File Upload and Execute
CVE-2009-3068—23 sep 2009
Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J-Web Interface - '/configuration' Multiple Cross-Site Scripting Vulnerabilities
CVE-2009-3486—remotehardware22 sep 2009
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authen
23RIESGO
abrir ↗
← anteriorpágina 1342 / 2737siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.