Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.419exploits catalogados
38.564CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.745Exploit-DB 24.485GitHub PoC 15.945VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.419 exploits
Exploit-DB✓ VexDay Proof
IPortalX - 'blogs.asp?Date' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Extended Module Player (xmp) 2.5.1 - 'oxm.c' / 'dtt_load.c' Multiple Local Buffer Overflow Vulnerabilities
Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a n
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPortalX - '/forum/login_user.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RunCMS 1.6 - Blind SQL Injection (IDS Evasion)
Multiple SQL injection vulnerabilities in RunCMS before 1.6.1 allow remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Limbo CMS 1.0.4 - 'com_option' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin.php in Limbo CMS 1.0.4.2 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Total Player 3.0 - '.m3u' File Denial of Service
TotalPlayer 3.0 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .m3u
23RIESGO
abrir ↗Metasploit400
HP LoadRunner 9.0 ActiveX AddFolder Buffer Overflow
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions befo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AOL Picture Editor 'YGPPicEdit.dll' ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities
Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Logaholic - 'index.php?conf' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Logaholic - 'profiles.php?newconfname' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Logaholic - 'index.php' SQL Injection
Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Logaholic - 'update.php?page' SQL Injection
Multiple SQL injection vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zoom Player 3.30/5/6 - '.ZPL' Error Message Arbitrary Code Execution
Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code v
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PDFlib 7.0.2 - Multiple Remote Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a lon
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.x - '/forum/viewforum.php?forum' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.x - '/forum/viewthread.php?forum' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.x - '/work/work.php?display_upload_form Action origin' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MRBS 1.2.x - 'view_entry.php' SQL Injection
SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WinUAE 1.4.4 - 'zfile.c' Stack Buffer Overflow
Stack-based buffer overflow in the zfile_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail with clamav-milter < 0.91.2 - Remote Command Execution
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP eSupportDiagnostics 1.0.11 - 'hpediag.dll' ActiveX Control Multiple Information Disclosure Vulnerabilities
HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
iDevSpot iSupport 1.8 - 'index.php' Local File Inclusion
PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local fi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteScape Forum - 'dispatch.cgi' Tcl Command Injection
support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator charact
23RIESGO
abrir ↗Metasploit300
IBM Lotus Domino Web Access Upload Module Buffer Overflow
Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, in
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProWizard 4 PC 1.62 - Multiple Remote Stack Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in ProWizard 4 PC (prowiz) 1.62 and earlier allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache 2.2.6 (Windows) - Share PHP File Extension Mapping Information Disclosure
Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote att
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.22 - IPv6 Hop-By-Hop Header Remote Denial of Service
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-b
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 7.0.x/8.0.x/9.0.x - ActiveX Control 'navigateToURL' API Cross Domain Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail 38k4 - webmail Host header Denial of Service
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of servic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 8.0.34.0/9.0.x - 'main.swf?baseurl' asfunction: Protocol Handler Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allo
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.