Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.252exploits catalogados
38.481CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.678Exploit-DB 24.485GitHub PoC 15.900VulnCheck XDB 9221Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.252 exploits
Exploit-DB✓ VexDay Proof
V-Webmail 1.6.4 - '/includes/pear/XML/Tree.php?CONFIG[pear_dir]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
V-Webmail 1.6.4 - '/includes/pear/Net/Socket.php?CONFIG[pear_dir]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
V-Webmail 1.6.4 - '/includes/email.list.search.php?CONFIG[includes]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
V-Webmail 1.6.4 - '/includes/cachedConfig.php?CONFIG[pear_dir]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FFmpeg libavformat - 'psxstr.c' STR Data Heap Buffer Overflow
Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remot
23RIESGO
abrir ↗Metasploit0
Trixbox langChoice PHP Local File Inclusion
Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PageFusion 1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TGS Content Management 0.3.2r2 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TGS Content Management 0.3.2r2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xomol CMS 1.2 - '/index.php' HTML Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Boonex Dolphin 6.1.2 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.7.1 - 'admincp/faq.php?Injection adminlog.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x ver
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zoph 0.7.2.1 - SQL Injection
SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified ve
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fuzzylime (cms) 3.01 - 'blog.php' Local File Inclusion
Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zoph 0.7.2.1 - 'search.php?_off' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Metasploit600
Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download
The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snaps
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DodosMail 2.5 - 'dodosmail.php' Local File Inclusion
Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 4ndvddb 0.91 Module - 'id' SQL Injection
SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell meta
23RIESGO
abrir ↗Metasploit200
OpenTFTP SP 1.4 Error Packet Overflow
Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execut
50RIESGO
abrir ↗Metasploit300
Novell GroupWise Messenger Client Buffer Overflow
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Messenger 2.0 Client - Buffer Overflow
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileg
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdFlux' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - Authentication Bypass
RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FaName 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FaName 1.0 - 'page.php?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdTag' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.