Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.451exploits catalogados
38.590CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.767Exploit-DB 24.485GitHub PoC 15.955VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.451 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Tour de France Pool 1.0.1 Module - MosConfig_absolute_path Remote File Inclusion
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hunkaray Okul Portali 1.1 - 'Duyuruoku.asp' SQL Injection
SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebDirector - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox/Thunderbird/SeaMonkey - Chrome-Loaded About:Blank Script Execution
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yahoo! Widget < 4.0.5 - 'GetComponentVersion()' Remote Overflow
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Asterisk < 1.2.22/1.4.8 - IAX2 Channel Driver Remote Crash
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, A
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebEvent 4.03 - 'Webevent.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlueSkyChat ActiveX Control 8.1.2 - Remote Buffer Overflow
Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'titletext-ed.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'vote.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'index.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'admin.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Baidu Soba Search Bar 5.4 - 'BaiduBar.dll' ActiveX Control Remote Code Execution
A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Store Application Template - 'Sign_In.aspx' SQL Injection
SQL injection vulnerability in sign_in.aspx in WebStore (Online Store Application Template) allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fail2ban 0.8 - Remote Denial of Service
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Real Estate Listing Website Application Template Login Dialog - SQL Injection
SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpCoupon - Remote Payment Bypass
user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, an
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pay Roll Time Sheet and Punch Card Application With Web UI - 'login.asp' SQL Injection
SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interf
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Message Board / Threaded Discussion Forum - 'Sign_In.aspx' SQL Injection
SQL injection vulnerability in sign_in.aspx in Message Board / Threaded Discussion Forum Application Template allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Berthanas Ziyaretci Defteri 2.0 - 'Yonetici.asp' SQL Injection
Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to exec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 5.3 SP6 - 'pioout' Arbitrary Library Loading Privilege Escalation
pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (Pa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution
The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation
Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bandersnatch 0.4 - Multiple Input Validation Vulnerabilities
Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Metyus Forum Portal 1.0 - 'Philboard_Forum.asp' SQL Injection
SQL injection vulnerability in philboard_forum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 5.3 SP6 - FTP 'gets()' Local Privilege Escalation
Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecif
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 5.2/5.3 - Capture Command Local Stack Buffer Overflow
Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.