Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.252exploits catalogados
38.481CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.678Exploit-DB 24.485GitHub PoC 15.900VulnCheck XDB 9221Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.252 exploits
Exploit-DB✓ VexDay Proof
SiteXS CMS 0.1.1 - Arbitrary File Upload / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Diigo Toolbar and Diigolet Comment Feature - HTML Injection / Information Disclosure
Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WISE-FTP 4.1/5.5.8 - FTP Client 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to crea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Classic FTP 1.02 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP serve
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure
SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not proper
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Screen 4.0.3 (OpenBSD) - Local Authentication Bypass
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.6 - 'chdir()' Function http URL Argument Safe_mode Restriction Bypass
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_m
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenDocMan 1.x - 'out.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UltraEdit 14.00b - FTP/SFTP 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption
Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsConnectionNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsDestinationNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Metasploit300
Novell iPrint Client ActiveX Control Buffer Overflow
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows bef
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Crysis 1.21 - HTTP/XML-RPC Service Remote Denial of Service
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell iPrint Client - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows bef
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcConnectionPoolNew1.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Skulltag 0.97 d2-RC3 - Malformed Packet Denial of Service
Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang) via a series of long,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/externalResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/Applications/lifecycleModulesNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP serv
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/customResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Metasploit300
VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow
Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.