Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.451exploits catalogados
38.590CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.767Exploit-DB 24.485GitHub PoC 15.955VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.451 exploits
Exploit-DB✓ VexDay Proof
W1L3D4 WEBmarket 0.1 - SQL Injection
SQL injection vulnerability in urunbak.asp in W1L3D4 WEBmarket 0.1 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FuseTalk 4.0 - 'blog/include/common/comfinish.cfm?FTVAR_SCRIPTRUN' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, En
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Comersus Cart 7.0.7 - 'comersus_customerAuthenticateForm.asp' redirectUrl Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BugHunter HTTP Server 1.6.2 - Parse Error Information Disclosure
httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Comersus Cart 7.0.7 - 'comersus_optReviewReadExec.asp?id' SQL Injection
SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to exec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FuseTalk 2.0/3.0 - 'AuthError.cfm' SQL Injection
SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Metasploit400
Altap Salamander 2.5 PE Viewer Buffer Overflow
Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (Englis
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebIf - 'OutConfig' Local File Inclusion
Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary l
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TDizin - 'Arama.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WSPortal 1.0 - 'content.php' SQL Injection
content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fuzzylime 1.0 - 'Low.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeScreamer 1.0 - 'serverPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when register_globals is enabled, allow remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 3.0.1 for Windows - 'Corefoundation.dll' Denial of Service
corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (cr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kaspersky Internet Security 6.0 - SSDT Hooks Multiple Local Vulnerabilities
klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Worksta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 6.0.13 - JSP Example Web Applications Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomca
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache MyFaces Tomahawk JSF Framework 1.1.5 - 'Autoscroll' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Letterman Subscriber Module 1.2.4 - 'Mod_Lettermansubscribe.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) befor
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Speech API ActiveX Control (Windows 2000 SP4) - Remote Buffer Overflow (MS07-033)
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as use
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Speech API ActiveX Control (Windows XP SP2) - Remote Buffer Overflow (MS07-033)
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as use
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 3 for Windows - Protocol Handler Command Injection
Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mbedthis AppWeb 2.2.2 - URL Protocol Format String
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports l
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Firebird SQL Fbserver 2.0 - Remote Buffer Overflow
Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a l
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WindowsPT 1.2 - User ID Key Spoofing
Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Beehive Forum 0.7.1 - 'links.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JFFNms 0.8.3 - 'auth.php?user' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JFFNms 0.8.3 - 'admin/setup.php' Direct Request Authentication Bypass
admin/setup.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to read and modify conf
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
bbPress 0.8.1 - 'BB-login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in bb-login.php in bbPress 0.8.1 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JFFNms 0.8.3 - 'auth.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic_
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JFFNms 0.8.3 - 'admin/adm/test.php' PHP Information Disclosure
Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBSupport 2.0.0 Integrated Ticket System - 'vBSupport.php' SQL Injection
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execu
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.