Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.239exploits catalogados
38.477CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.678Exploit-DB 24.485GitHub PoC 15.893VulnCheck XDB 9215Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.239 exploits
Exploit-DB✓ VexDay Proof
Celoxis - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ADN Forum 1.0b - Blind SQL Injection
Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Metasploit600
phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection
Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WikyBlog 1.7.1 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
A4Desk Event Calendar - 'eventid' SQL Injection
SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpScheduleIt 1.2.10 - 'reserve.php' Remote Code Execution
Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
A4Desk Event Calendar - 'v' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic_quotes_gpc is disabled, allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FAQ Management Script - 'catid' SQL Injection
SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 5 - Command Line Client HTML Special Characters HTML Injection
Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xen 3.3 - XenStore Domain Configuration Data Unsafe Storage
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not proper
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CAcert - 'analyse.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress MU 1.2/1.3 - '/wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Go
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WhoDomLite 1.1.3 - 'wholite.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wholite.cgi in WhoDomLite 1.1.3 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lyrics Script - 'search_results.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ClickBank Portal - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Recipe Script - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WinFTP Server 2.3.0 - 'NLST' Denial of Service
WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of se
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ZoneAlarm 8.0.20 - HTTP Proxy Remote Denial of Service
TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of
23RIESGO
abrir ↗Metasploit300
WinFTP 2.3.0 NLST Denial of Service
WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of se
43RIESGO
abrir ↗Metasploit500
DATAC RealWin SCADA Server Buffer Overflow
Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote att
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ICONICS Vessel / Gauge / Switch 8.02.140 - ActiveX Buffer Overflow (Metasploit)
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenNMS 1.5.x - 'Username' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasyRealtorPRO 2008 - 'site_search.php' Multiple SQL Injections
SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flatpress 0.804 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenNMS 1.5.x - 'filter' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenNMS 1.5.x - 'j_username' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.