Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.600exploits catalogados

39.734CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.742Exploit-DB 24.486GitHub PoC 16.618VulnCheck XDB 9736Nuclei 4493Metasploit 3525✓ solo verificadosrecientes populares riesgo

4493 exploits

Nucleimedium

FileZilla Server < 0.9.6 - DoS via MS-DOS Device Names

CVE-2005-0850—

FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename cont

18RIESGO

abrir ↗

Nucleimedium

FileZilla Server < 0.9.6 - DoS via MODE Z Infinite Loop

CVE-2005-0851—

FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of se

18RIESGO

abrir ↗

Nucleimedium

FileZilla FTP Server 2.2.22 - Buffer Overflow

CVE-2006-2173—

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and po

18RIESGO

abrir ↗

Nucleimedium

FileZilla Server < 0.9.22 - DoS via Wildcard Commands

CVE-2006-6565—

FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to t

60RIESGO

abrir ↗

Nucleicritical

Titan FTP Server 6.03 and 6.0.5.549 - Heap Overflow via Long Commands

CVE-2008-0702—

Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of

38RIESGO

abrir ↗

Nucleicritical

Titan FTP Server 6.05 DELE Command - Heap Overflow

CVE-2008-5281—

Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute arbitrary code via a lo

38RIESGO

abrir ↗

Nucleimedium

FileZilla Server < 0.9.31 - SSL/TLS Packet Overflow DoS

CVE-2009-0884—

Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified v

18RIESGO

abrir ↗

Nucleihigh

ProFTPD < 1.3.3c - Directory Traversal via mod_site_misc

CVE-2010-3867—

Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authentic

18RIESGO

abrir ↗

Nucleimedium

vsftpd < 2.3.3 - DoS

CVE-2011-0762—

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a deni

60RIESGO

abrir ↗

Nucleicritical

VSFTPD 2.3.4 - Backdoor Command Execution

CVE-2011-2523—

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RIESGO

abrir ↗

Nucleilow

Pure-FTPd ≤ 1.0.22 - Directory Traversal

CVE-2011-3171—

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise

18RIESGO

abrir ↗

Nucleimedium

Titan FTP Server < 10.40 Move Function - Directory Traversal

CVE-2014-1841—

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke

38RIESGO

abrir ↗

Nucleimedium

Titan FTP Server Search Function < 10.40 - User Enumeration

CVE-2014-1842—

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke

38RIESGO

abrir ↗

Nucleimedium

Titan FTP Server < 10.40 - User Properties Traversal

CVE-2014-1843—

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke

38RIESGO

abrir ↗

Nucleimedium

vsftpd <= 3.0.2 - Access Restriction Bypass

CVE-2015-1419—

Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown

18RIESGO

abrir ↗

Nucleimedium

Mailpit < 1.28.2 - SMTP CRLF Injection

CVE-2026-23829MEDIUM

Mailpit has SMTP Header Injection via Regex Bypass

28RIESGO

abrir ↗

Nucleihigh

ProFTPD mod_sql - Preauth User Backdoor

CVE-2026-42167HIGH

mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where th

56RIESGO

abrir ↗

Nucleihigh

Zimbra Collaboration Suite < 10.1.20 - OS Command Injection

CVE-2026-73570HIGHbajo ataque

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp

100RIESGO

abrir ↗

Nucleicritical

ProFTPd-1.3.3c - Backdoor Command Execution

CVE-2010-20103CRITICAL

ProFTPD 1.3.3c Backdoor Command Execution

68RIESGO

abrir ↗

Nucleimedium

MySQL - Authentication Bypass

CVE-2012-2122—

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor

60RIESGO

abrir ↗

Nucleihigh

Memcached Server SASL Authentication - Remote Code Execution

CVE-2016-8706HIGH

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of

48RIESGO

abrir ↗

Nucleicritical

Cisco Smart Install - Configuration Download

CVE-2018-0171HIGHbajo ataque

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica

100RIESGO

abrir ↗

Nucleihigh

Apache HTTP Server - NULL Pointer Dereference

CVE-2018-8011—

mod_md, DoS via Coredumps on specially crafted requests

30RIESGO

abrir ↗

Nucleicritical

NTPsec > 1.1.3 - 'ctl_getitem' Out-of-Bounds Read

CVE-2019-6443—

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read

50RIESGO

abrir ↗

Nucleihigh

PostgreSQL 9.3-12.3 Authenticated Remote Code Execution

CVE-2019-9193—

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RIESGO

abrir ↗

Nucleicritical

Oracle WebLogic Server - Remote Code Execution (Insecure Deserialization)

CVE-2020-14644CRITICALbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RIESGO

abrir ↗

Nucleicritical

Oracle WebLogic Server - Remote Code Execution

CVE-2020-2883CRITICALbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RIESGO

abrir ↗

Nucleicritical

IBM Data Risk Manager - Hardcoded Credentials

CVE-2020-4429CRITICAL

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrativ

65RIESGO

abrir ↗

Nucleicritical

OpenSMTPD 6.4.0-6.6.1 - Remote Code Execution

CVE-2020-7247CRITICALbajo ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RIESGO

abrir ↗

Nucleihigh

Veritas Backup Exec - Broken Authentication

CVE-2021-27877HIGHbajo ataqueransomware

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authenticat

98RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.