Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.419exploits catalogados
38.564CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.745Exploit-DB 24.485GitHub PoC 15.945VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.419 exploits
Exploit-DB✓ VexDay Proof
Oracle 10g - 'CTX_DOC.MARKUP' SQL Injection
Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in O
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Korean GHBoard - 'Component/upload.jsp' Arbitrary File Upload
Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Japanese PHP Gallery Hosting - Arbitrary File Upload
Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Korean GHBoard FlashUpload Component - 'download.jsp?name' Arbitrary File Access
Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hackish 1.1 - 'Blocco.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
deeemm CMS (dmcms) 0.7 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jeebles Technology Jeebles Directory 2.9.60 - 'download.php' Local File Inclusion
Absolute path traversal vulnerability in download.php in Jeebles Directory 2.9.60 allows remote attackers to read arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat - WebDAV SSL Remote File Disclosure
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.
35RIESGO
abrir ↗Metasploit600
Macrovision InstallShield Update Service ActiveX Unsafe Method
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXn
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SearchSimon Lite 1.0 - 'Filename.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ReloadCMS 1.2.5 - 'index.php' Local File Inclusion
Directory traversal vulnerability in system.php in ReloadCMS 1.2.7 allows remote attackers to include and execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Socketmail 2.2.1 - 'lostpwd.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
rNote 0.9.7 - 'rnote.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SocketKB 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteBar 3.3.8 - '/translator.php?upd/cmd/Action/edit' Arbitrary PHP Code Execution
Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated use
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RealPlayer 10.0/10.5/11 - 'ierpplug.dll' ActiveX Control Import Playlist Name Stack Buffer Overflow
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and e
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SpeedFan - 'Speedfan.sys' Local Privilege Escalation
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteBar 3.3.8 - 'index.php?target' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteBar 3.3.8 - 'translator.php?dir' Traversal Arbitrary File Access
Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenti
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteBar 3.3.8 - 'integrator.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteBar 3.3.8 - 'command.php?Modify User Action uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Macrovision SafeDisc - 'SecDRV.SYS' Method_Neither Privilege Escalation
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professio
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nortel Networks UNIStim IP SoftPhone 2050 - RTCP Port Buffer Overflow
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (applicatio
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alcatel Lucent Omnivista 4760 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to
23RIESGO
abrir ↗Metasploit300
RealPlayer ierpplug.dll ActiveX Control Playlist Name Buffer Overflow
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and e
50RIESGO
abrir ↗Metasploit300
Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Method
SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 2.11.1 - 'Server_Status.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Asterisk 'asterisk-addons' 1.2.7/1.4.3 - CDR_ADDON_MYSQL Module SQL Injection
Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GCALDaemon 1.0-beta13 - Remote Denial of Service
The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers to
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.