Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
82.860exploits catalogados
38.826CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 24.997Exploit-DB 24.485GitHub PoC 16.070VulnCheck XDB 9333Nuclei 4457Metasploit 3518✓ solo verificadosrecientespopularesriesgo
82.863 exploits
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'new.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craft
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'login.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'mailing_list.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'Sendmail.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'send_pwd.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'power_search.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'suggest_category.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle January 2007 Security Update - Multiple Vulnerabilities
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DT_Guestbook 1.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is enab
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
InstantASP 4.1 - 'Members1.aspx' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax Petition Book 3.06 - 'jax_petitionbook.php?languagepack' Local File Inclusion
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Outpost Firewall PRO 4.0 - Local Privilege Escalation
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple WebKit build 18794 - WebCore Remote Denial of Service
WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and applicati
41RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax Petition 3.06 Book - 'smileys.php?languagepack' Local File Inclusion
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kaspersky AntiVirus 6.0 - Local Privilege Escalation
Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for Fi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
InstantASP 4.1 - 'Logon.aspx?sessionid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercur Messaging 2005 - IMAP Remote Buffer Overflow
Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oftpd 0.3.7 - Unsupported Address Family Remote Denial of Service
oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Libgtop2 Library - Local Buffer Overflow
Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local user
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin SpamBam - Key Calculation Security Bypass
The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-su
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow (1)
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KarjaSoft Sami FTP Server 2.0.2 - USER/PASS Remote Buffer Overflow (PoC)
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 7.x - 'Block-Old_Articles.php' SQL Injection
SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when register_
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.8 - DMG UFS UFS_LookUp Denial of Service
The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WinZip 9.0 - Command Line Remote Buffer Overflow
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and po
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 0.8.6a - Denial of Service (1)
VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.