Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.957exploits catalogados

32.195CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientes populares riesgo

20.003 exploits

Referência

CVE-2019-8387

CVE-2019-8387—

MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.

35RIESGO

abrir ↗

Referência

CVE-2011-2543

CVE-2011-2543—

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote

28RIESGO

abrir ↗

Referência

CVE-2018-5724

CVE-2018-5724—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore

28RIESGO

abrir ↗

Referência

CVE-2018-5724

CVE-2018-5724—

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore

28RIESGO

abrir ↗

Referência

CVE-2012-3574

CVE-2012-3574—

Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6

28RIESGO

abrir ↗

Referência

CVE-2019-6273

CVE-2019-6273—

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

28RIESGO

abrir ↗

Referência

CVE-2019-6273

CVE-2019-6273—

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

28RIESGO

abrir ↗

Referência

CVE-2014-7279

CVE-2014-7279—

The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equ

28RIESGO

abrir ↗

Referência

CVE-2010-3154

CVE-2010-3154—

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attac

28RIESGO

abrir ↗

Referência

phpMyWebmin 1.0 - 'window.php' Remote File Inclusion

CVE-2006-5124—

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar

23RIESGO

abrir ↗

Referência

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

CVE-2008-1912—

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RIESGO

abrir ↗

Referência

DivX Player 6.7 - '.srt' File Subtitle Parsing Buffer Overflow

CVE-2008-1912—

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause

28RIESGO

abrir ↗

Referência

CVE-2019-12744

CVE-2019-12744—

SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a differe

28RIESGO

abrir ↗

Referência

CVE-2019-12744

CVE-2019-12744—

SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a differe

28RIESGO

abrir ↗

Referência

CVE-2019-14750

CVE-2019-14750—

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w

43RIESGO

abrir ↗

Referência

osTicket 1.12 - Persistent Cross-Site Scripting

CVE-2019-14750—

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w

43RIESGO

abrir ↗

Referência

CVE-2019-9768

CVE-2019-9768—

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timesta

28RIESGO

abrir ↗

Referência

CVE-2019-9768

CVE-2019-9768—

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timesta

28RIESGO

abrir ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (PoC)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RIESGO

abrir ↗

Referência

VUPlayer 2.49 - '.asx' 'HREF' Universal Buffer Overflow

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RIESGO

abrir ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (1)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RIESGO

abrir ↗

Referência

VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (2)

CVE-2009-0174—

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in th

28RIESGO

abrir ↗

Referência

CVE-2010-2122

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RIESGO

abrir ↗

Referência

CVE-2010-2122

CVE-2010-2122—

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r

43RIESGO

abrir ↗

Referência

MailBee WebMail Pro 4.1 - Remote File Disclosure

CVE-2008-0333—

Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET all

28RIESGO

abrir ↗

Referência

CVE-2014-3976

CVE-2014-3976—

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allow

28RIESGO

abrir ↗

Referência

CVE-2014-3976

CVE-2014-3976—

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allow

28RIESGO

abrir ↗

Referência

CVE-2023-26068

CVE-2023-26068CRITICAL

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

68RIESGO

abrir ↗

Referência

CVE-2020-1380

CVE-2020-1380HIGHbajo ataque

Scripting Engine Memory Corruption Vulnerability

76RIESGO

abrir ↗

Referência

CVE-2019-9189

CVE-2019-9189—

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.