Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.116exploits catalogados
38.373CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.594Exploit-DB 24.485GitHub PoC 15.870VulnCheck XDB 9205Nuclei 4449Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.116 exploits
Metasploit300
Oracle Document Capture 10g ActiveX Control Buffer Overflow
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - '/drivers/net/r8169.c' Out-of-IOMMU Error Local Denial of Service
The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Smart ASP Survey - 'catid' SQL Injection
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Uiga Church Portal - 'year' SQL Injection
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_digifolio 1.52 - 'id' SQL Injection
SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
StandAloneArcade 1.1 - 'gamelist.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin WP-Syntax 0.9.1 - Remote Command Execution
WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wap-motor - 'image' Directory Traversal
Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Uiga Church Portal - 'year' SQL Injection
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PAD Site Scripts 3.6 - 'list.php?string' SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Moa Gallery 1.2.0 - 'p_filename' Remote File Disclosure
Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VideoGirls - 'profile.php?profile_name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VideoGirls - 'forum.php?t' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Moa Gallery 1.2.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VideoGirls - 'view.php?p' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JCE-Tech PHP Video Script - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion
SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion
Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSANE 0.5.0 - 'save.php' Remote File Inclusion
PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DigiOz Guestbook 1.7.2 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection
SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Auction RSS Content Script - 'rss.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PAD Site Scripts 3.6 - 'list.php?string' SQL Injection
Multiple SQL injection vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Auction RSS Content Script - 'search.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.30 - 'atalk_getname()' 8-bytes Stack Disclosure (1)
The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows lo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Turnkey Arcade Script - SQL Injection (2)
SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProShow Producer / Gold 4.0.2549 - '.psh' Universal Buffer Overflow (SEH)
Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service
A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBe
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.