Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.419exploits catalogados
38.564CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.745Exploit-DB 24.485GitHub PoC 15.945VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.419 exploits
Exploit-DB✓ VexDay Proof
WordPress Core 2.2.3 - '/wp-admin/page-new.php?popuptitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PRO-Search 0.17 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AwesomeTemplateEngine 1 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in templates/example_template.php in AwesomeTemplateEngine allow rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.2.3 - '/wp-admin/edit.php?backup' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W3-mSQL - Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MODx 0.9.6.1 - 'AjaxSearch.php' Local File Inclusion
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) inc
23RIESGO
abrir ↗Exploit-DB
Asterisk 1.x - BYE Message Remote Denial of Service
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW bef
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
InfoSoft FusionCharts 3 - '.swf' Flash File Remote Code Execution
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft Fu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MODx 0.9.6.1 - 'htcmime.php' Source Code Information Disclosure
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) inc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
White_Dune 0.29beta791 - Multiple Local Code Execution Vulnerabilities
Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Camtasia Studio 4.0.2 - 'csPreloader' Remote Code Execution
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveCart 1.0.1 - 'return' Cross-Site Scripting (1)
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveCart 1.0.1 - 'return' Cross-Site Scripting (2)
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MilliScripts - 'dir.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in dir.php in milliscripts Redirection allows remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveCart 1.0.1 - 'q' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveCart 1.0.1 - 'email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
InstantSoftwares Dating Site - Login SQL Injection
SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
libcdio 0.7x - GNU Compact Disc Input and Control Library Buffer Overflow
Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHCDownload 1.1 - 'search.php?string' SQL Injection
SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Makale Scripti - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHCDownload 1.1 - 'search.php?string' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetBizCity FaqMasterFlexPlus - 'faq.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Persits Software XUpload Control - 'AddFolder()' Remote Buffer Overflow
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions befo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CoolPlayer 2.17 - 'CPLI_ReadTag_OGG()' Buffer Overflow
Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earli
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenBiblio 0.x - 'staff_del_confirm.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenBiblio 0.x - 'theme_del_confirm.php?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenBiblio 0.x - 'theme_preview.php?themeName' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenBiblio 0.5.2-pre4 and earlier allow remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetBizCity FaqMasterFlexPlus - 'faq.php' SQL Injection
Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Feng 0.1.15 - Multiple Remote Buffer Overflow / Denial of Service Vulnerabilities
The Url_init function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a de
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Libnemesi 0.6.4-rc1 - Multiple Remote Buffer Overflow Vulnerabilities
Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to execute arbitrary code via
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.