Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.957exploits catalogados
32.195CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientespopularesriesgo
20.003 exploits
Referência
FOSS Gallery Admin 1.0 - Arbitrary File Upload
CVE-2008-4509—
Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows
23RIESGO
abrir ↗
Referência
FOSS Gallery Public 1.0 - Arbitrary File Upload
CVE-2008-4509—
Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows
23RIESGO
abrir ↗
Referência
FOSS Gallery Public 1.0 - Arbitrary File Upload (PoC)
CVE-2008-4509—
Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows
23RIESGO
abrir ↗
Referência
CVE-2012-5907
CVE-2012-5907—
Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2014-3806
CVE-2014-3806—
Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2014-3806
CVE-2014-3806—
Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2013-2619
CVE-2013-2619—
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot
23RIESGO
abrir ↗
Referência
CVE-2013-2619
CVE-2013-2619—
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot
23RIESGO
abrir ↗
Referência
CVE-2019-11354
CVE-2019-11354—
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Ori
28RIESGO
abrir ↗
Referência
CVE-2014-10010
CVE-2014-10010—
Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary file
23RIESGO
abrir ↗
Referência
CVE-2014-10010
CVE-2014-10010—
Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary file
23RIESGO
abrir ↗
Referência
CVE-2024-13985
CVE-2024-13985CRITICAL
Dahua EIMS capture_handle.action RCE
48RIESGO
abrir ↗
Referência
CVE-2024-13985
CVE-2024-13985CRITICAL
Dahua EIMS capture_handle.action RCE
48RIESGO
abrir ↗
Referência
CVE-2024-13985
CVE-2024-13985CRITICAL
Dahua EIMS capture_handle.action RCE
48RIESGO
abrir ↗
Referência
CVE-2017-15920
CVE-2017-15920—
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer
23RIESGO
abrir ↗
Referência
CVE-2017-15920
CVE-2017-15920—
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer
23RIESGO
abrir ↗
Referência
CVE-2013-2225
CVE-2013-2225—
inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _pr
23RIESGO
abrir ↗
Referência
CVE-2010-1997
CVE-2010-1997—
Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "
23RIESGO
abrir ↗
Referência
CVE-2014-4874
CVE-2014-4874—
BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment
23RIESGO
abrir ↗
Referência
CVE-2020-7384
CVE-2020-7384HIGH
Client-Side Command Injection in Rapid7 Metasploit
68RIESGO
abrir ↗
Referência
NetWin Surgemail 3.8k4-4 - IMAP (Authenticated) Remote LIST Universal
CVE-2008-1498—
Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated user
23RIESGO
abrir ↗
Referência
CVE-2018-10258
CVE-2018-10258—
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to
23RIESGO
abrir ↗
Referência
CVE-2018-10258
CVE-2018-10258—
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to
23RIESGO
abrir ↗
Referência
CVE-2017-6549
CVE-2017-6549—
Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W
23RIESGO
abrir ↗
Referência
CVE-2020-11803
CVE-2020-11803—
An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with th
23RIESGO
abrir ↗
Referência
CVE-2019-17124
CVE-2019-17124—
Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
28RIESGO
abrir ↗
Referência
TUTOS 1.3 - 'cmd.php' Remote Command Execution
CVE-2008-0149—
TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls
23RIESGO
abrir ↗
Referência
CVE-2015-6402
CVE-2015-6402—
Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11,
23RIESGO
abrir ↗
Referência
CVE-2020-7384
CVE-2020-7384HIGH
Client-Side Command Injection in Rapid7 Metasploit
68RIESGO
abrir ↗
Referência
Squirrelcart 2.2.0 - 'cart_content.php' Remote File Inclusion
CVE-2006-2483—
PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to
23RIESGO
abrir ↗
← anteriorpágina 143 / 667siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.