Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.117exploits catalogados
38.374CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.594Exploit-DB 24.485GitHub PoC 15.871VulnCheck XDB 9205Nuclei 4449Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.117 exploits
Exploit-DB✓ VexDay Proof
Rentventory - Multiple SQL Injections
SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - 'albumID' SQL Injection
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sourcefire 3D Sensor & Defense Center 4.8.x - Privilege Escalation
The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authentica
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MP3-Nator 2.0 - '.plf' Universal Buffer Overflow (SEH)
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PEamp 1.02b - '.m3u' Local Buffer Overflow (PoC)
Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - GET Remote Denial of Service
The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure
The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,
23RIESGO
abrir ↗Metasploit300
Media Jukebox 8.0.400 Buffer Overflow (SEH)
Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a d
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.3.3 - 'op' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.3.3 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BigACE 2.6 - 'cmd' Local File Inclusion
Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TFM MMPlayer 2.0 - '.m3u'/'.ppl' Universal Buffer Overflow (SEH)
Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection
SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1)
Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Profession
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PunBB Affiliates Mod 1.1 - Blind SQL Injection
Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier fo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
jax formmailer 3.0.0 - Remote File Inclusion
PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SMF Mod Member Awards 1.0.2 - Blind SQL Injection
SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 fo
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.