Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.745exploits catalogados
38.712CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.884Exploit-DB 24.485GitHub PoC 16.068VulnCheck XDB 9333Nuclei 4457Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.745 exploits
Exploit-DB✓ VexDay Proof
Oracle 9i/10g - DBMS_EXPORT_EXTENSION SQL Injection
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Coppermine Photo Gallery 1.4.10 - Multiple Local/Remote File Inclusions
admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g - DBMS_EXPORT_EXTENSION SQL Injection
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADA
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/goodies.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/index.php?chemin' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/index.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KDPics 1.11 - 'exif.php?lib_path' Remote File Inclusion
Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_search/index.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word 2000 - Code Execution
Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flipper Poll 1.1.0 - 'poll.php?root_path' Remote File Inclusion
PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPProbid 5.24 - 'Lang.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lang.php in PHPProbid 5.24 allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasyMail Objects 6.x - Connect Method Remote Stack Buffer Overflow
Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities
Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Comodo Firewall 2.3.6 - 'CMDMon.SYS' Multiple Denial of Service Vulnerabilities
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Portail Web PHP 2.5.1 - 'includes.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Por
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve - 'lgserver.exe' Remote Stack Overflow
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1
60RIESGO
abrir ↗Metasploit200
CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 10 - ICMP Remote Denial of Service
Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CascadianFAQ 4.1 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - iMovie HD '.imovieproj' Filename Format String
Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-as
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - iPhoto 'photo://' URL Handling Format String
Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - Help Viewer '.help' Filename Format String
Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (cra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persis
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allow
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.