Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.451exploits catalogados
38.590CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.767Exploit-DB 24.485GitHub PoC 15.955VulnCheck XDB 9270Nuclei 4456Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.451 exploits
Exploit-DB✓ VexDay Proof
HYIP Manager Pro - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 3.5/4.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers
23RIESGO
abrir ↗Metasploit200
CA BrightStor ArcServe Media Service Stack Buffer Overflow
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Me
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyNewsGroups 0.6 - 'Include.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include.php in MyNewsGroups :) allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DynaTracker 1.5.1 - 'action.php?base_path' Remote File Inclusion
PHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)
Multiple stack-based buffer overflows in Second Sight Software ActiveGS ActiveX control (ActiveGS.ocx) allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Mailutils imap4d 0.6 - exec-shield Remote Format String
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to e
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow (PoC)
Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control (ActiveMod.ocx) allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cdelia Software ImageProcessing - '.BMP' File Denial of Service
Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service (application crash) v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetSprint Toolbar - ActiveX 'toolbar.dll' Denial of Service (PoC)
Buffer overflow in the isChecked function in toolbar.dll in Netsprint Toolbar 1.1 might allow remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime for Java 7 - Memory Access (Metasploit)
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows rem
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection
Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
File117 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to ex
23RIESGO
abrir ↗Metasploit600
Apple QTJava toQTPointer() Arbitrary Memory Access
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows rem
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lms 1.5.x - 'RTMessageAdd.php' Remote File Inclusion
PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TJSChat 0.95 - 'You.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in you.php in TJSChat 0.95 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 7.1.5 - QTJava toQTPointer() Java Handling Arbitrary Code Execution
Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows rem
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'admin.php' Groups Module Edit/Add Group Field SQL Injection
Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ripe Website Manager 0.8.4 - '/contact/index.php?ripeformpost' SQL Injection
SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'admin.php?modsettings Module smiley_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure
admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ACVSWS - 'Transport.php' Remote File Inclusion
PHP remote file inclusion vulnerability in inc_ACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyBibli 1.32 - 'Init.Inc.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/init.inc.php in PHPMyBibli allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'admin.php' badwords/banlist Module SQL Injection
Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - '/include/controlcenter/users.php' Multiple Method Privilege Escalations
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'admin.php?Groups Module group_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - '/include/admin/banlist.php?delete' Cross-Site Request Forgery Banlist Deletion
Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMySpace Gold 8.10 - 'article.php' SQL Injection
SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'pm.php' Recipient Name SQL Injection
Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AMSN 0.96 - Malformed Message Denial of Service
aMSN (aka Alvaro's Messenger) 0.96 and earlier allows remote attackers to cause a denial of service (application crash)
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.