Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.554exploits catalogados
39.165CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientespopularesriesgo
83.554 exploits
Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.0.x - JavaScript Handler Race Condition Memory Corruption
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (c
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.50 R14 - 'online.php' SQL Injection
Multiple SQL injection vulnerabilities in the Virtual War (VWar) 1.5.0 R15 module for PHP-Nuke allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenMPT 1.17.02.43 - Multiple Remote Buffer Overflows (PoC)
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Component Remository 3.25 - Remote File Inclusion
PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and ea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPCheck Server Monitor 5.x - Directory Traversal
Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
YaBBSE 1.x - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Thatware 0.4.6 - 'ROOT_PATH' Remote File Inclusion
PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote a
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mafia Moblog 6 - 'Big.php' Remote File Inclusion
PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
miniBloggie 1.0 - 'Fname' Remote File Inclusion
PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PgMarket 2.2.3 - 'CFG[libdir]' Remote File Inclusion
PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when register_globals is enabled, allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ArcSoft Mms Composer 1.5.5/2.0 - Multiple Vulnerabilities
Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple One File Guestbook 1.0 - Security Bypass
Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tagger Luxury Edition - 'BBCodeFile' Remote File Inclusion
Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AlsaPlayer 0.99.x - Multiple Buffer Overflow Vulnerabilities
Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of se
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache 2.2.2 - CGI Script Source Code Information Disclosure
Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that co
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XennoBB 1.0.5/1.0.6/2.1/2.2 - 'profile.php' Directory Traversal
Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IrfanView 3.98 - '.ANI' Image File Denial of Service
IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a craf
23RIESGO
abrir ↗Metasploit400
MS06-040 Microsoft Server Service NetpwPathCanonicalize Overflow
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote a
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Barracuda Spam Firewall 3.3.03.053 - Remote Code Execution (2)
preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cwfm 0.9.1 - 'Language' Remote File Inclusion
PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and po
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Visual Studio COM Object Instantiation Denial of Service
Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execut
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ME Download System 1.3 - 'header.php' Remote File Inclusion
PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'calendar.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ModernBill 1.6 - 'config.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'member.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'stats.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XennoBB 2.1 - 'profile.php' Multiple SQL Injections
SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arb
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.