Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.322exploits catalogados
38.524CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.711Exploit-DB 24.485GitHub PoC 15.927VulnCheck XDB 9231Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.322 exploits
Exploit-DB✓ VexDay Proof
BSD (Multiple Distributions) - 'strfmon()' Integer Overflow
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DigiDomain 2.2 - 'lookup_result.asp?domain' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DigiDomain 2.2 - 'suggest_result.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Metasploit400
Quick FTP Pro 2.1 Transfer-Mode Overflow
Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service o
50RIESGO
abrir ↗Metasploit300
TFTP Server for Windows 1.4 ST WRQ Buffer Overflow
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or ex
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Remote Buffer Overflow
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GeeCarts - 'view.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlackBoard Academic Suite 6/7 - '/bin/common/announcement.pl?data__announcements___pk1_pk2__subject' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JAF CMS 4.0 RC2 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GeeCarts - 'search.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 2.x - 'Signature' iFrame Security
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPAddressBook 2.0 - 'index.php' SQL Injection
Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlackBoard Academic Suite 6/7 - '/webapps/BlackBoard/execute/viewCatalog?searchText' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GeeCarts - 'show.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell eDirectory 8.x - eMBox Utility 'edirutil' Command
The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on clien
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB PJIRC Module 0.5 - 'irc.php' Local File Inclusion
Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to incl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LeadTools MultiMedia 15 - 'LTMM15.dll' ActiveX Control Arbitrary File Overwrite
The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bomba Haber 2.0 - 'haberoku.php' SQL Injection
SQL injection vulnerability in haberoku.php in Serbay Arslanhan Bomba Haber 2.0 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlcenter/pass.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'search_results.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/alterCats.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - '/controlpannel/createNews.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlcenter/index.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'locate.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'include/sendit.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/createFeatured.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlcenter/verify.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Classifieds 1.0 - 'controlpannel/index.php3?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Efestech E-Kontor - 'id' SQL Injection
SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alkacon OpenCMS 7.0.3 - 'users_list.jsp' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allo
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.