Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.156exploits catalogados
38.964CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.131Exploit-DB 24.485GitHub PoC 16.091VulnCheck XDB 9467Nuclei 4464Metasploit 3518✓ solo verificadosrecientespopularesriesgo
83.156 exploits
Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - 'view_order.php?order_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phoenix Evolution CMS - '/modules/pageedit/index.php?pageid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 2.3.x - 'global.php' SQL Injection
SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Invoice 2.2 - 'home.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String
Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote att
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - 'view_order.php?order_id' SQL Injection
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phoenix Evolution CMS - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/image.php?image' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - 'view_doc.php?view_doc' SQL Injection
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/print_order.php?order_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/nav.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/print_order.php?order_id' SQL Injection
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Back-End CMS 0.4.5 - 'Facts.php?includes_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion
PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Plain Old WebServer 0.0.7/0.0.8 Firefox Extension - Directory Traversal
Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial AV Download Management 1.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Back-End CMS 0.4.5 - '/admin/index.php?includes_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BirdBlog 1.x - 'comment.php?entryid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DanPHPSupport 0.5 - 'admin.php?do' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Call of Duty Server 4.1.x - Callvote Map Command Remote Buffer Overflow
Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Back-End CMS 0.4.5 - 'search.php?includes_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BirdBlog 1.x - 'user.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Photostore - 'view_photog.php?photogid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BirdBlog 1.x - 'index.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Photostore - 'details.php?gid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Exporia 0.3 - 'Common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'VML' Remote Buffer Overflow (SP2)
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BBSNew 2.0.1 - 'index2.php' Remote File Inclusion
PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DanPHPSupport 0.5 - 'index.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote at
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.