Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.554exploits catalogados
39.165CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientespopularesriesgo
83.554 exploits
Exploit-DB✓ VexDay Proof
TSEP 0.942 - 'copyright.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TSEP 0.942 - 'copyright.php' Remote File Inclusion
PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht Quickie - 'Quick_Path' Remote File Inclusion
PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht FAQ 1.0 Script - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitra
23RIESGO
abrir ↗Metasploit300
McAfee Subscription Manager Stack Buffer Overflow
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'admin.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
myEvent 1.2/1.3 - 'myevent.php' Remote File Inclusion
PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'members.php?cfg_root' Remote File Inclusion
PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'signup.php?site_name' SQL Injection
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BomberClone 0.11 - Multiple Vulnerabilities
The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Moskool 1.5 Component - 'Admin.Moskool.php' Remote File Inclusion
PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Mosk
23RIESGO
abrir ↗Metasploit200
Easy File Sharing FTP Server 2.0 PASS Overflow
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrar
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
X-Scripts X-Protection 1.10 - 'Protect.php' SQL Injection
SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
X-Scripts X-Poll 1.10 - 'top.php' SQL Injection
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Deleted Frame Object Denial of Service
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke - 'INP modules.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-trackback.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-feed.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-comments-post.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.5.0.4 - JavaScript Navigator Object Code Execution
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chang
60RIESGO
abrir ↗Metasploit500
Apache Module mod_rewrite LDAP Protocol Buffer Overflow
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and o
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GeoClassifieds Enterprise 2.0.5.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/2003 - Explorer Drag and Drop Remote Code Execution
Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attacke
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bosdates 3.x/4.0 - 'Payment.php' Remote File Inclusion
PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗Exploit-DB
ZYXEL Prestige 660H-61 ADSL Router - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router runnin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local u
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eIQnetworks License Manager - Remote Buffer Overflow (multi) (1)
Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in product
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - NDFXArtEffects Stack Overflow
Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.