Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

72.018exploits catalogados

32.219CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8195Nuclei 4217Metasploit 3463✓ solo verificadosrecientes populares riesgo

22.786 exploits

Exploit-DB

libxml2 - xmlParserPrintFileContextInternal Heap Buffer Overread

CVE-2016-1838—24 feb 2016

The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 1

23RIESGO

abrir ↗

Exploit-DB

Mambo < 4.5.3h - Multiple Vulnerabilities

CVE-2006-1794—24 feb 2016

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arb

23RIESGO

abrir ↗

Exploit-DB

Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal

CVE-2016-4004—23 feb 2016

Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated adminis

23RIESGO

abrir ↗

Exploit-DB

libquicktime 1.2.4 - Integer Overflow

CVE-2016-2399—23 feb 2016

Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to caus

23RIESGO

abrir ↗

Exploit-DB

BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities

CVE-2016-1914—22 feb 2016

Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server

23RIESGO

abrir ↗

Exploit-DB

Linux Kernel 3.x (Ubuntu 14.04 / Mint 17.3 / Fedora 22) - Double-free usb-midi SMEP Privilege Escalation

CVE-2016-2384—22 feb 2016

Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows p

23RIESGO

abrir ↗

Exploit-DB

BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities

CVE-2016-1915—22 feb 2016

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4

23RIESGO

abrir ↗

Exploit-DB

Ubuntu < 15.10 - PT Chown Arbitrary PTs Access Via User Namespace Privilege Escalation

CVE-2016-2856—22 feb 2016

pt_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubun

23RIESGO

abrir ↗

Exploit-DB

PEAR LiveUser < 0.16.8 - Arbitrary File Access

CVE-2006-0869—21 feb 2016

Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Reposito

23RIESGO

abrir ↗

Exploit-DB

QuickHeal 16.00 - 'webssx.sys' Driver Denial of Service

CVE-2015-8285—19 feb 2016

The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.

23RIESGO

abrir ↗

Exploit-DB

Geeklog < 1.4.0 - Multiple Vulnerabilities

CVE-2006-0823—19 feb 2016

Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attacke

23RIESGO

abrir ↗

Exploit-DB

Adobe Flash - SimpleButton Creation Type Confusion

CVE-2015-8644—19 feb 2016

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

28RIESGO

abrir ↗

Exploit-DB

ADOdb < 4.71 - Cross Site Scripting

CVE-2006-0806—18 feb 2016

Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow re

23RIESGO

abrir ↗

Exploit-DB

Adobe Flash - ATF Processing Heap Overflow

CVE-2016-0971—17 feb 2016

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS

35RIESGO

abrir ↗

Exploit-DB

Adobe Flash - LoadVars.decode Use-After-Free

CVE-2016-0974—17 feb 2016

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and

35RIESGO

abrir ↗

Exploit-DB

Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer

CVE-2016-0984HIGHbajo ataque17 feb 2016

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and

83RIESGO

abrir ↗

Exploit-DB

Inductive Automation Ignition 7.8.1 - Remote Leakage Of Shared Buffers

CVE-2015-2080—17 feb 2016

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive informat

60RIESGO

abrir ↗

Exploit-DB

Adobe Flash - textfield Constructor Type Confusion

CVE-2016-0985—17 feb 2016

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RIESGO

abrir ↗

Exploit-DB

Adobe Flash - BitmapData.drawWithQuality Heap Overflow

CVE-2016-0964—17 feb 2016

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RIESGO

abrir ↗

Exploit-DB

Adobe Flash - Out-of-Bounds Image Read

CVE-2016-0965—17 feb 2016

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RIESGO

abrir ↗

Exploit-DB

Adobe Flash - H264 File Stack Corruption

CVE-2016-0967—17 feb 2016

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RIESGO

abrir ↗

Exploit-DB

Flash ActiveX 28.0.0.137 - Code Execution (1)

CVE-2018-4878HIGHbajo ataqueransomware16 feb 2016

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

93RIESGO

abrir ↗

Exploit-DB

glibc - 'getaddrinfo' Stack Buffer Overflow (PoC)

CVE-2015-7547—16 feb 2016

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C

45RIESGO

abrir ↗

Exploit-DB

Microsoft Windows 7 (x86) - 'afd.sys' Dangling Pointer Privilege Escalation (MS14-040)

CVE-2014-1767—15 feb 2016

Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Wind

28RIESGO

abrir ↗

Exploit-DB

Microsoft Windows - Kerberos Security Feature Bypass (MS16-014)

CVE-2016-0049—15 feb 2016

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

28RIESGO

abrir ↗

Exploit-DB

Flash ActiveX 28.0.0.137 - Code Execution (2)

CVE-2018-4878HIGHbajo ataqueransomware13 feb 2016

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

93RIESGO

abrir ↗

Exploit-DB

Yeager CMS 1.2.1 - Multiple Vulnerabilities

CVE-2015-7568—10 feb 2016

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the a

23RIESGO

abrir ↗

Exploit-DB

Yeager CMS 1.2.1 - Multiple Vulnerabilities

CVE-2015-7571—10 feb 2016

Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin

23RIESGO

abrir ↗

Exploit-DB

Microsoft Windows 7 SP1 (x86) - 'WebDAV' Local Privilege Escalation (MS16-016) (1)

CVE-2016-0051—10 feb 2016

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Window

43RIESGO

abrir ↗

Exploit-DB

Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure

CVE-2016-0956—10 feb 2016

The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows r

35RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.