Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.322exploits catalogados
38.524CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.711Exploit-DB 24.485GitHub PoC 15.927VulnCheck XDB 9231Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.322 exploits
Exploit-DB✓ VexDay Proof
PHP-Stats 0.1.9.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EsContacts 1.0 - 'add_groupe.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EsContacts 1.0 - 'importer.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EsContacts 1.0 - 'groupes.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EsContacts 1.0 - 'search.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'SeImpersonatePrivilege' Local Privilege Escalation
Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) Ne
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cobalt 2.0 - 'adminler.asp' SQL Injection
SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EsContacts 1.0 - 'login.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users to
23RIESGO
abrir ↗Metasploit300
OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ICQ 6 - 'Personal Status Manager' Remote Buffer Overflow (PoC)
Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LightNEasy sqlite / no database 1.2.2 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
amfPHP 1.2 - '/browser/methodTable.php?class' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W2B Online Banking - 'ilang' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Istant-Replay - 'read.php' Remote File Inclusion
PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
amfPHP 1.2 - '/browser/details?class' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Metasploit500
BigAnt Server 2.50 SP1 Buffer Overflow
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows r
60RIESGO
abrir ↗Metasploit200
BigAnt Server 2.2 Buffer Overflow
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows r
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
amfPHP 1.2 - '/browser/code.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cezanne Software 6.5.1/7 - 'CFLogon.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cezanne 6.5.1/7 - 'cflookup.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cezanne 7 - '/CznCommon/CznCustomContainer.asp?FUNID' SQL Injection
Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cezanne 6.5.1/7 - 'CznCustomContainer.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cezanne 7 - 'cflookup.asp?FUNID' SQL Injection
Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cezanne 6.5.1/7 - 'home.asp?CFTARGET' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce Poll Booth 2.0 AddOn - 'pollbooth.php' SQL Injection
SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.x - 'OpenView5.exe?Action' Traversal Arbitrary File Access
Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Trillian 3.1.9 - '.DTD' File XML Parser Buffer Overflow
Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W2B Dating Club - 'browse.php' SQL Injection
SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W2B PHPHotResources - 'cat.php' SQL Injection
SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft SharePoint Server 2.0 - Picture Source HTML Injection
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.