Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.554exploits catalogados
39.165CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientespopularesriesgo
83.554 exploits
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Internet.HHCtrl Click Denial of Service
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cras
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GnuPG 1.4/1.9 - Parse_Comment Remote Buffer Overflow
Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentatio
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chameleon LE 1.203 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.13.5 - Remote Signal Handling (PoC)
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by trig
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a de
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PH
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 5 - Information Disclosure
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.5 - SQL Injection / Admin Credentials Disclosure
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other prod
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - ASP Stack Overflow (MS06-034)
Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote atta
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MiniBB 1.5 - 'news.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco/Protego CS-MARS < 4.2.1 - 'JBoss' Remote Code Execution
Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Res
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteDepth CMS 3.0.1 - 'SD_DIR' Remote File Inclusion
PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IDevSpot PHPHostBot 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - String To Binary Function Denial of Service
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cras
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IDevSpot PHPLinkExchange 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Geodesic Solutions (Multiple Products) - 'index.php?b' SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GeoAuctions 1.0.6 Enterprise - 'index.php?d' SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Security Monitoring Analysis and Response System JBoss - Command Execution
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitorin
28RIESGO
abrir ↗Metasploit200
FileCopa FTP Server Pre 18 Jul Version
Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - DataSourceControl Denial of Service
DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a deni
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and ear
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - OVCtl Denial of Service
Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 2.1 < 2.1.6 - SQL Injection (2)
SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BT Voyager 2091 (Wireless ADSL) - Multiple Vulnerabilities
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 4.x/5.x - Server Date_Format Denial of Service
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authe
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RARLAB WinRAR 3.x - LHA Filename Handling Buffer Overflow
Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege Escalation
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link Routers - UPNP Buffer Overflow
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.