Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.202exploits catalogados
38.443CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.651Exploit-DB 24.485GitHub PoC 15.884VulnCheck XDB 9215Nuclei 4454Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.202 exploits
Exploit-DB✓ VexDay Proof
EZ Webitor - Authentication Bypass
Multiple SQL injection vulnerabilities in login.php in EZ Webitor allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linksys WRT54GC 1.5.7 Firmware - 'administration.cgi' Access Validation
Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'index.php?showGroup' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6 (Debian 4.0 / Ubuntu / Gentoo) UDEV < 1.4.1 - Local Privilege Escalation (1)
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to ga
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'email.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'delete.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
1by1 1.67 - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial of service (application
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'edit.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Photo Pro 2.0 - 'section' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TotalCalendar 2.4 - Remote Password Change
admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)
Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on W
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'view.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WB News 2.1.2 - Insecure Cookie Handling
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cook
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Creasito E-Commerce 1.3.16 - Authentication Bypass
Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedHat Stronghold Web Server 2.3 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) ye
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Esoftpro Online Guestbook Pro - 'display' Blind SQL Injection
SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebGlimpse 2.18.7 - 'DOC' Directory Traversal
Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbit
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Esoftpro Online Guestbook Pro - 'display' Blind SQL Injection
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Malleo 1.2.3 - 'admin.php' Local File Inclusion
Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XRDP 0.4.1 - Remote Buffer Overflow (PoC)
The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to h
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MagicISO CCD/Cue - Local Heap Overflow (PoC)
Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlackBerry Enterprise Server 4.0/4.1 - MDS Connection Service Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DNS Tools (PHP Digger) - Remote Command Execution
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the
23RIESGO
abrir ↗Metasploit500
Linux udev Netlink Local Privilege Escalation
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to ga
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Geronimo 2.1.x - '/console/portal/Server/Monitoring' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Ser
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
chCounter 3.1.3 - Authentication Bypass
SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Geronimo 2.1.x - Cross-Site Request Forgery (Multiple Admin Function)
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Applicat
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RazorCMS 0.3RC2 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Geronimo 2.1.x - '/console/portal/' URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Ser
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.