Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.322exploits catalogados
38.524CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.711Exploit-DB 24.485GitHub PoC 15.927VulnCheck XDB 9231Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.322 exploits
Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 9.26 - Multiple Vulnerabilities
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Parallels Virtuozzo Containers 3.0.0-25.4/4.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 36
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LANDesk Management Suite 8.80.1.1 - PXE TFTP Service Directory Traversal
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasySite 2.0 - 'browser.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasySite 2.0 - 'image_editor.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Metasploit400
HP OpenView NNM 7.53, 7.51 OVAS.EXE Pre-Authentication Stack Buffer Overflow
Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows
60RIESGO
abrir ↗Metasploit200
Borland CaliberRM StarTeam Multicast Service Buffer Overflow
Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (ST
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DivXDB 2002 0.94b - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Terracotta - 'index.php' Local File Inclusion
Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka Op
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGKit 0.9 - 'connexion.php' Remote File Inclusion
PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
@lex Guestbook 4.0.5 - 'setup.php?language_setup' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jack (tR) Jax LinkLists 1.00 - 'jax_linklists.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
@lex Guestbook 4.0.5 - 'index.php?test' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service / Memory Corruption Vulnerabilities
WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EfesTECH Video 5.0 - 'catID' SQL Injection
SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax Guestbook 3.31/3.50 - 'jax_Guestbook.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in jax_guestbook.php in Jax Guestbook 3.1 and 3.31 allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
@lex Poll 1.2 - 'setup.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)
Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 f
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)
Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execu
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal
Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r349
23RIESGO
abrir ↗Metasploit300
Wireshark LDAP Dissector DOS
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of s
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - LDAP Dissector Denial of Service
The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of s
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - X.509sat Dissector Denial of Service
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to ca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 6.0.4 - Empty Binary String Literal Remote Denial of Service
MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-q
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 0.99.8 - SCCP Dissector Decode As Feature Denial of Service
The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 a
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.