Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
85.039exploits catalogados
39.796CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.790Exploit-DB 24.487GitHub PoC 16.910VulnCheck XDB 9820Nuclei 4504Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.487 exploits
Exploit-DB✓ VexDay Proof
Apple WebKit - 'RenderLayer' Use-After-Free
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple WebKit 10.0.2 (12602.3.12.0.1_ r210800) - 'constructJSReadableStreamDefaultReader' Type Confusion
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS/iOS Kernel 10.12.3 (16D32) - Double-Free Due to Bad Locking in fsevents Device
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS Kernel 10.12.3 (16D32) - 'audit_pipe_open' Off-by-One Memory Corruption
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Broadcom Wi-Fi SoC - TDLS Teardown Request Remote Heap Overflow
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS Kernel 10.12.2 (16C67) - 'AppleIntelCapriController::GetLinkConfig' Code Execution Due to Lack of Bounds Checking
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graph
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS/iOS Kernel 10.12.3 (16D32) - SIOCSIFORDER Socket ioctl Memory Corruption Due to Bad Bounds Checking
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple WebKit 10.0.2 (12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗Exploit-DB
Apache Tomcat 6/7/8/9 - Information Disclosure
The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bluecoat ASG 6.6/CAS 1.3 - OS Command Injection (Metasploit)
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bluecoat ASG 6.6/CAS 1.3 - Local Privilege Escalation (Metasploit)
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc
23RIESGO
abrir ↗Exploit-DB
Moxa AWK-3131A 1.4 < 1.7 - 'Username' OS Command Injection
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK
53RIESGO
abrir ↗Exploit-DB
Zyxel_ EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection
A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vul
83RIESGO
abrir ↗Exploit-DB
Pixie 1.0.4 - Arbitrary File Upload
Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/ind
23RIESGO
abrir ↗Exploit-DB
BackBox OS - Denial of Service
BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packet
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Splunk Enterprise - Information Disclosure
Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS/IOS 10.12.2 (16C67) - 'mach_msg' Heap Overflow
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sync Breeze Enterprise 9.5.16 - 'Import Command' Local Buffer Overflow
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9
50RIESGO
abrir ↗Exploit-DB
Intermec PM43 Industrial Printer - Local Privilege Escalation
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x befo
23RIESGO
abrir ↗Exploit-DB
MikroTik RouterBoard 6.38.5 - Denial of Service
A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remot
28RIESGO
abrir ↗Exploit-DB
EyesOfNetwork (EON) 5.0 - Remote Code Execution
EyesOfNetwork ("EON") 5.0 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacte
23RIESGO
abrir ↗Exploit-DB
EyesOfNetwork (EON) 5.0 - SQL Injection
Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QNAP QTS < 4.2.4 - Domain Privilege Escalation
QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by
23RIESGO
abrir ↗Exploit-DB
Microsoft IIS 6.0 - WebDAV 'ScStoragePathFromUrl' Remote Buffer Overflow
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict Mode
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari - Out-of-Bounds Read when Calling Bound Function
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗Exploit-DB
Nuxeo 6.0/7.1/7.2/7.3 - Remote Code Execution (Metasploit)
Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote auth
35RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.