Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.322exploits catalogados
38.524CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.711Exploit-DB 24.485GitHub PoC 15.927VulnCheck XDB 9231Nuclei 4455Metasploit 3513✓ solo verificadosrecientespopularesriesgo
82.328 exploits
Metasploit400
MySQL yaSSL SSL Hello Message Buffer Overflow
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attacke
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 6.0 yaSSL 1.7.5 - Hello Message Buffer Overflow (Metasploit)
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attacke
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.2.3 - '/wp-admin/page-new.php?popuptitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.2.3 - '/wp-admin/post.php?popuptitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AwesomeTemplateEngine 1 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in templates/example_template.php in AwesomeTemplateEngine allow rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W3-mSQL - Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PRO-Search 0.17 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.2.3 - '/wp-admin/edit.php?backup' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MODx 0.9.6.1 - 'AjaxSearch.php' Local File Inclusion
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) inc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
White_Dune 0.29beta791 - Multiple Local Code Execution Vulnerabilities
Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
InfoSoft FusionCharts 3 - '.swf' Flash File Remote Code Execution
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft Fu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MODx 0.9.6.1 - 'htcmime.php' Source Code Information Disclosure
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) inc
23RIESGO
abrir ↗Exploit-DB
Asterisk 1.x - BYE Message Remote Denial of Service
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW bef
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Camtasia Studio 4.0.2 - 'csPreloader' Remote Code Execution
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveCart 1.0.1 - 'return' Cross-Site Scripting (1)
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveCart 1.0.1 - 'return' Cross-Site Scripting (2)
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveCart 1.0.1 - 'q' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveCart 1.0.1 - 'email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MilliScripts - 'dir.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
InstantSoftwares Dating Site - Login SQL Injection
SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
libcdio 0.7x - GNU Compact Disc Input and Control Library Buffer Overflow
Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHCDownload 1.1 - 'search.php?string' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHCDownload 1.1 - 'search.php?string' SQL Injection
SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Makale Scripti - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenBiblio 0.x - 'staff_del_confirm.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Persits Software XUpload Control - 'AddFolder()' Remote Buffer Overflow
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions befo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CoolPlayer 2.17 - 'CPLI_ReadTag_OGG()' Buffer Overflow
Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earli
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetBizCity FaqMasterFlexPlus - 'faq.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetBizCity FaqMasterFlexPlus - 'faq.php' SQL Injection
Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenBiblio 0.x - 'theme_del_confirm.php?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to injec
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.