Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.117exploits catalogados
38.374CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.594Exploit-DB 24.485GitHub PoC 15.871VulnCheck XDB 9205Nuclei 4449Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.117 exploits
Exploit-DB✓ VexDay Proof
Avax Vector 1.3 - 'avPreview.ocx' ActiveX Control Buffer Overflow
Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remo
23RIESGO
abrir ↗Metasploit600
PeaZip Zip Processing Command Injection
PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .z
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Horde 3.1 - 'Passwd' Module Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PeaZIP 2.6.1 - Compressed Filename Command Injection
PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .z
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Armor < 3.5.0.12 - 'OAmon.sys' Local Privilege Escalation
The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Pers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Movie PHP Script 2.0 - 'init.php?anticode' Code Execution
Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 6.0.18 - Form Authentication Existing/Non-Existing 'Username' Enumeration
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, al
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
My Mini Bill - 'orderid' SQL Injection
SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime - Image Description Atom Sign Extension (PoC)
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! < 1.5.11 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting
Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP respons
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_mosres - Multiple SQL Injections
Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and Jo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Google Chrome 0.3.154 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting
Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sitecore CMS 6.0.0 rev. 090120 - 'default.aspx' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Seminar 1.28 - 'id' Blind SQL Injection
SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Omilen Photo Gallery 0.5b - Local File Inclusion
Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allows
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CUPS 1.3.9 - 'cups/ipp.c' Null Pointer Dereference Denial of Service
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
flashlight free edition - Local File Inclusion / SQL Injection
Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Grades & Attendance 3.2.6 - Blind SQL Injection
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 4 - 'reload()' Denial of Service
Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
flashlight free edition - Local File Inclusion / SQL Injection
SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Joomlaequipment (com_juser) 2.0.4 - SQL Injection
SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote at
23RIESGO
abrir ↗Metasploit500
Apple OS X iTunes 8.1.1 ITMS Overflow
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Grades & Attendance 3.2.6 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roxio CinePlayer 3.2 - 'IAManager.dll' Remote Buffer Overflow HeapSpray
Heap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OCS Inventory NG 1.02 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU glibc - Timezone Parsing Remote Integer Overflow
Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Open-school 1.0 - 'id' SQL Injection
SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! 1.5.x - Cross-Site Scripting / Information Disclosure
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASP Football Pool 2.3 - Remote Database Disclosure
ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows rem
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.