Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.745exploits catalogados
38.712CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.884Exploit-DB 24.485GitHub PoC 16.068VulnCheck XDB 9333Nuclei 4457Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.745 exploits
Metasploit300
Trend Micro OfficeScan Client ActiveX Control Buffer Overflow
Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupIN
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/wordfilter.php?Admin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/CONFIG/errmsg.inc.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTagmin.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/ban_watch.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTag.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 1.x/2.0.x - 'Templates.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/fu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - 'tagviewer.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/editTag.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTagmin.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Community Server - 'SearchResults.aspx' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updateconf.php?Admin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/addTagmin.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updatefilter.php?Admin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/verify.php?configpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register_globals i
28RIESGO
abrir ↗Metasploit600
Sun Solaris Telnet Remote Authentication Bypass Vulnerability
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterpr
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SunOS 5.10/5.11 in.TelnetD - Remote Authentication Bypass
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterpr
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Atlassian JIRA 3.7.3 - BrowseProject.JSPA Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extensi
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sage 1.3.6 - Extension Feed HTML Injection
Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eXtreme File Hosting - Arbitrary '.RAR' File Upload
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PH
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.1 - STR_IReplace Remote Denial of Service
Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 11 - PassWDMySQL Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM) 11.0.0 and earlier allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SYSCP 1.2.15 - System Control Panel CronJob Arbitrary Code Execution
scripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home directories, which all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP Tru64 Alpha OSF1 5.1 - 'ps' Information Leak
The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including env
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQLNewsEngine - 'Affichearticles.php3' Remote File Inclusion
PHP remote file inclusion vulnerability in affichearticles.php3 in MySQLNewsEngine allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g - DBMS_EXPORT_EXTENSION SQL Injection
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADA
43RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.