Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
85.039exploits catalogados
39.796CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.790Exploit-DB 24.487GitHub PoC 16.910VulnCheck XDB 9820Nuclei 4504Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.487 exploits
Exploit-DB
PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RIESGO
abrir ↗Exploit-DB
BOA Web Server 0.94.14rc21 - Arbitrary File Access
/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read
50RIESGO
abrir ↗Exploit-DB
Freeware Advanced Audio Coder (FAAC) 1.28 - Denial of Service
The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to c
23RIESGO
abrir ↗Exploit-DB
Freeware Advanced Audio Coder (FAAC) 1.28 - Denial of Service
The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to caus
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU binutils - 'decode_pseudodbg_assert_0' Buffer Overflow
The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU binutils - 'ieee_object_p' Stack Buffer Overflow
The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU binutils - 'aarch64_ext_ldst_reglist' Buffer Overflow
The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU binutils - 'bfd_get_string' Stack Buffer Overflow
The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GN
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU binutils - 'print_insn_score16' Buffer Overflow
The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of ser
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU binutils - 'rx_decode_opcode' Buffer Overflow
opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU binutils - 'disassemble_bytes' Heap Overflow
The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit JSC - JIT Optimization Check Failed in IntegerCheckCombiningPhase::handleBlock
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit JSC - 'Intl.getCanonicalLocales' Heap Buffer Overflow
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTun
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit JSC - arrayProtoFuncSplice does not Initialize all Indices
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit JSC - JSGlobalObject::haveABadTime Causes Type Confusions
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS
23RIESGO
abrir ↗Exploit-DB
Sudo 1.8.20 - 'get_process_ttyname()' Local Privilege Escalation
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_
23RIESGO
abrir ↗Exploit-DB
HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmwa
60RIESGO
abrir ↗Exploit-DB
Google Chrome - V8 Private Property Arbitrary Code Execution
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a
28RIESGO
abrir ↗Exploit-DB
KBVault MySQL 0.16a - Arbitrary File Upload
KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-man
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GStreamer gst-plugins-bad Plugin - NULL Pointer Dereference
The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of ser
23RIESGO
abrir ↗Exploit-DB
WordPress Plugin WP Jobs < 1.5 - SQL Injection
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VMware vSphere Data Protection 5.x/6.x - Java Deserialization
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of th
23RIESGO
abrir ↗Exploit-DB
libcroco 0.6.12 - Denial of Service
The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial o
28RIESGO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a deni
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS - Disk Arbitration Daemon Race Condition
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitra
23RIESGO
abrir ↗Exploit-DB
nuevoMailer 6.0 - SQL Injection
SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NU
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS 10.12.3 / iOS < 10.3.2 - Userspace Entitlement Checking Race Condition
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The
23RIESGO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (i
23RIESGO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of se
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.