Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.117exploits catalogados
38.374CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.594Exploit-DB 24.485GitHub PoC 15.871VulnCheck XDB 9205Nuclei 4449Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.117 exploits
Exploit-DB✓ VexDay Proof
Joomla! 1.5.x - Cross-Site Scripting / Information Disclosure
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Grades & Attendance 3.2.6 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roxio CinePlayer 3.2 - 'IAManager.dll' Remote Buffer Overflow HeapSpray
Heap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Joomlaequipment (com_juser) 2.0.4 - SQL Injection
SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
212Cafe WebBoard 2.90 Beta - Remote File Disclosure
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to rea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Acrobat 9.1.3 - Stack Exhaustion Denial of Service
Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and ear
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roxio CinePlayer 3.2 - 'SonicMediaPlayer.dll' Remote Buffer Overflow
Heap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2 allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ZeusCart 2.3 - 'maincatid' SQL Injection
SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'splice(2)' Double Lock Local Denial of Service
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
small pirate 2.1 - Cross-Site Scripting / SQL Injection
Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Arab Portal 2.2 - Authentication Bypass
Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
212Cafe WebBoard 2.90 Beta - 'view.php' Directory Traversal
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to rea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Million Dollar Text Links 1.0 - 'id' SQL Injection
SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zen Help Desk 2.1 - Authentication Bypass
Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Traidnt Up 2.0 - Cookie Authentication Bypass
Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BaoFeng Storm 3.9.62 - '.Playlist' File Buffer Overflow (PoC)
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.12.x - 'X-header' Remote Heap Buffer Overflow (PoC)
Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash)
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Impact Software AdPeeps 8.5d1 - Cross-Site Scripting / HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 8.0 - '/main/tracking/userLog.php' SQL Injection
SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to exec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cute Editor ASP.NET - Remote File Disclosure
Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BSD (Multiple Distributions) - 'gdtoa/misc.c' Memory Corruption
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode U
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
COWON America jetCast 2.0.4.1109 - '.mp3' Local Overflow
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Webradev Download Protect 1.0 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Boy Scout Advancement 0.3 - 'id' SQL Injection
SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
COWON America jetCast 2.0.4.1109 - '.mp3' Local Overflow
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Lytebox - 'wp-lytebox' Local File Inclusion
Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to incl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aardvark Topsites PHP 5.2 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
roomphplanning 1.6 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebMember 1.0 - 'formID' SQL Injection
SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL comm
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.