Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.554exploits catalogados
39.165CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientespopularesriesgo
83.554 exploits
Exploit-DB✓ VexDay Proof
VWar 1.5 - 'war.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'joinus.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XennoBB 2.1 - 'profile.php' Multiple SQL Injections
SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ModernBill 1.6 - 'config.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'calendar.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Clam Anti-Virus ClamAV 0.88.x - UPX Compressed PE File Heap Buffer Overflow
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Barracuda Spam Firewall 3.3.03.053 - Remote Code Execution (1)
preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'news.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'challenge.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPCodeCabinet 0.5 - 'Core.php' Remote File Inclusion
PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.17.7 - NFS and EXT3 Combination Remote Denial of Service
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system pani
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAPID 1.2.3.05 - 'ROOT_PATH' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TWiki 4.0.4 - 'configure' Remote Command Execution
Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion
PHP remote file inclusion vulnerability in includes/usercp_register.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'stats.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.5 - 'member.php?vwar_root' Remote File Inclusion
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ME Download System 1.3 - 'header.php' Remote File Inclusion
PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DConnect Daemon DC Chat - Denial of Service
The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of servi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DConnect Daemon - Listen Thread UDP Remote Buffer Overflow
Stack-based buffer overflow in main.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6.0/7.0 - IFrame Refresh Denial of Service
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XM
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.0.14 - 'global.php' Encoded Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.x - 'war.php?page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PSWD.JS - Insecure Password Hash
The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.x - 'war.php' Multiple SQL Injections
SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow (2)
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht Quickie - 'Quick_Path' Remote File Inclusion
PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TSEP 0.942 - 'copyright.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TSEP 0.942 - 'copyright.php' Remote File Inclusion
PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WoW Roster 1.5 - 'hsList.php?subdir' Remote File Inclusion
PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allo
23RIESGO
abrir ↗Metasploit300
McAfee Subscription Manager Stack Buffer Overflow
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.