Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.554exploits catalogados
39.165CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientespopularesriesgo
83.554 exploits
Exploit-DB✓ VexDay Proof
Easy File Sharing FTP Server 2.0 - 'PASS' Remote
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrar
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DieselScripts Smart Traffic - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and o
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XennoBB 1.0.x/2.2 - Icon_Topic SQL Injection
SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - CanonicalizePathName() Remote (MS06-040)
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote a
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tutti Nova 1.6 - 'TNLIB_DIR' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Identity Manager - Arbitrary Command Execution
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sonium Enterprise Adressbook 0.2 - 'folder' Include
PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Artlinks 1.0b4 - Remote File Inclusion
PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Mosets Tree 1.0 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the com_mtree compo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - 'TSUserEX.dll' ActiveX Control Memory Corruption
The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibl
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.11 - 'oid' Blind SQL Injection
Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 4/5 - SUID Routine Miscalculation Arbitrary DML Statement Execution
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU BinUtils 2.1x - GAS Buffer Overflow
Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundati
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fusionphp Fusion News 3.7 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Component Reporter 1.0 - 'Reporter.sql.php' Remote File Inclusion
PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.4.3/5.1.4 - 'sscanf' Local Buffer Overflow
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.x - XML Handler Race Condition Memory Corruption
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - 'MSOE.dll' Denial of Service
Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zen Cart Web Shopping Cart 1.3.0.2 - 'autoload_func.php?autoLoadConfig[999][0][loadFile]' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when register_globals is enabled,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - 'IMSKDIC.dll' Denial of Service
Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WEBInsta CMS 0.3.1 - 'users.php' Remote File Inclusion
PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lizge 20 - 'index.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Libmusicbrainz 2.0.2/2.1.x - Multiple Buffer Overflow Vulnerabilities
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 840
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (3)
Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allow
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin WP-DB Backup 1.6/1.7 - 'edit.php' Directory Traversal
Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ImageMagick 6.x - '.SGI' Image File Remote Heap Buffer Overflow
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cau
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux-HA Heartbeat 2.0.6 - Remote Denial of Service
The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/2003 help - Multiple Vulnerabilities
Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.