Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.451exploits catalogados
38.590CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.767Exploit-DB 24.485GitHub PoC 15.955VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.451 exploits
Exploit-DB✓ VexDay Proof
T1lib - 'intT1_Env_GetCompletePath' Buffer Overflow (PoC)
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent at
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nukedit 4.9.x - 'login.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Explorer - '.png' Image Local Denial of Service
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consum
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin WP-FeedStats 2.1 - HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow
Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary c
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BSM Store Dependent Forums 1.02 - 'Username' SQL Injection
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vikingboard 0.1.2 - 'post.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vikingboard 0.1.2 - 'user.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vikingboard 0.1.2 - 'cp.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
iFoto 1.0 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary dire
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vikingboard 0.1.2 - 'topic.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote au
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vikingboard 0.1.2 - 'cp.php' Information Disclosure
Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Browsers - URI Handlers Command Injection
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vikingboard 0.1.2 - 'forum.php' Information Disclosure
Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W1L3D4 philboard 0.3 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in W1L3D4_aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows RSH daemon 1.7 - Remote Buffer Overflow
Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-000000
50RIESGO
abrir ↗Metasploit200
Borland Interbase Create-Request Buffer Overflow
Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote at
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10.9.1 - 'Resname' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers
23RIESGO
abrir ↗Metasploit200
Windows RSH Daemon Buffer Overflow
Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-000000
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alstrasoft Affiliate Network Pro 8.0 - 'pgmid' SQL Injection
Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alstrasoft Affiliate Network Pro 8.0 - 'temp.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASP cvmatik 1.1 - Multiple HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alstrasoft Affiliate Network Pro 8.0 - 'index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zenturi NixonMyPrograms Class 'sasatl.dll 1.5.0.531' - Remote Buffer Overflow
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/edituser.php?userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Image Racer - 'searchresults.asp' SQL Injection
SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alstrasoft Sms Text Messaging Enterprise 2.0 - '/admin/membersearch.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alisveris Sitesi Scripti - 'index.asp' SQL Injection
Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitr
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.