Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.322exploits catalogados
38.524CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.711Exploit-DB 24.485GitHub PoC 15.927VulnCheck XDB 9231Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.322 exploits
Exploit-DB✓ VexDay Proof
Microsoft SharePoint Server 2.0 - Picture Source HTML Injection
Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pragmatic Utopia PU Arcade 2.2 - 'gid' SQL Injection
SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) compo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager 7.x - 'ovspmd' Buffer Overflow
Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows r
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/Vista/2000/2003/2008 Kernel - Usermode Callback Privilege Escalation (MS08-025) (1)
Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LICQ 1.3.5 - File Descriptor Remote Denial of Service
licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 8/9.0.x - '.SWF' File 'DeclareFunction2' ActionScript Tag Remote Code Execution
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code vi
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Swiki 1.5 - HTML Injection / Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.53 - Multiple Vulnerabilities
Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
URLStreet 1.0 - 'seeurl.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in seeurl.php in Xavier Flahaut URLStreet 1.0 allows remote attackers to inject
23RIESGO
abrir ↗Metasploit500
Tumbleweed FileTransfer vcst_eu.dll ActiveX Control Buffer Overflow
Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX cont
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Blog PixelMotion - 'sauvBase.php' Arbitrary Database Backup
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RobotStats 0.1 - 'graph.php?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SmarterTools SmarterMail 5.0 - HTTP Request Handling Denial of Service
Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to ca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 10 - rpc.ypupdated Remote Code Execution (Metasploit)
The SunView (SunTools) selection_svc facility allows remote users to read files.
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RobotStats 0.1 - 'robotstats.inc.php?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Glossaire 2.0 - 'glossaire.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Metasploit200
Computer Associates Alert Notification Buffer Overflow
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Web Server Creator 0.1 - 'langfile' Remote File Inclusion
PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nuke ET 3.4 - 'mensaje' HTML Injection
Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Expl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KwsPHP 1.0 ConcoursPhoto Module - 'VIEW' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Poplar Gedcom Viewer 2.0 - Search Page Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCO UnixWare < 7.1.4 p534589 - 'pkgadd' Local Privilege Escalation
Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privilege
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'resize.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)
Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'show.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.