Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.566exploits catalogados
39.907CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.846Exploit-DB 24.488GitHub PoC 17.314VulnCheck XDB 9877Nuclei 4513Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
RedHat Piranha Virtual Server Package - 'passwd.php3' Arbitrary Command Execution (Metasploit)
CVE-2000-0248—webappsphp18 oct 2010
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password tha
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Fat Player 0.6b - '.wav' Local Buffer Overflow (SEH)
CVE-2009-4962—localwindows18 oct 2010
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RedHat Piranha Virtual Server Package - 'passwd.php3' Arbitrary Command Execution (Metasploit)
CVE-2000-0322—webappsphp18 oct 2010
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary command
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - NTLM Weak Nonce (MS10-012)
CVE-2010-0231—remotewindows17 oct 2010
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Kisisel Radyo Script - Multiple Vulnerabilities
CVE-2010-4144—webappsasp17 oct 2010
SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft ASP.NET - Padding Oracle File Download (MS10-070)
CVE-2010-3332—remoteasp17 oct 2010
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Intern
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Kisisel Radyo Script - Multiple Vulnerabilities
CVE-2010-4145—webappsasp17 oct 2010
Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Office - 'HtmlDlgHelper' Class Memory Corruption (MS10-071)
CVE-2010-3329—doswindows16 oct 2010
mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Micr
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - Buffer Overflow
CVE-2010-4142—doswindows15 oct 2010
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TWiki 5.0 - bin/login Multiple Cross-Site Scripting Vulnerabilities
CVE-2010-3841—webappsphp14 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TWiki 5.0 - '/bin/view?rev' Cross-Site Scripting
CVE-2010-3841—webappsphp14 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Winamp 5.5.8.2985 - Multiple Buffer Overflows
CVE-2010-4371—doswindows13 oct 2010
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vect
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.5.10/3.6.6 - 'WMP' Memory Corruption Using Popups
CVE-2010-2745—doswindows13 oct 2010
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, w
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Java 6 - OBJECT tag 'launchjnlp'/'docbase' Remote Buffer Overflow
CVE-2010-3552—remotewindows13 oct 2010
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows r
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Solaris - 'su' Crash
CVE-2010-3503—dossolaris13 oct 2010
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Jstore - 'Controller' Local File Inclusion
CVE-2010-5286—webappsphp13 oct 2010
Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AdaptCMS 2.0.1 Beta - Remote File Inclusion (Metasploit)
CVE-2010-2618—webappsphp12 oct 2010
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Fusion Middleware 10.1.2/10.1.3 - BPEL Console Cross-Site Scripting
CVE-2010-3581—webappsjsp12 oct 2010
Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows rem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.53/7.51 - 'OVAS.exe' Stack Buffer Overflow (Metasploit)
CVE-2008-1697—remotewindows12 oct 2010
Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Collabtive 0.65 - Multiple Vulnerabilities
CVE-2010-5285—webappsphp12 oct 2010
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Collabtive 0.65 - Multiple Vulnerabilities
CVE-2010-5284—webappsphp12 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OrangeHRM 2.6.0.1 - Local File Inclusion
CVE-2010-4798—webappsphp11 oct 2010
Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BaconMap 1.0 - SQL Injection
CVE-2010-4800—webappsphp11 oct 2010
SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BaconMap 1.0 - Local File Disclosure
CVE-2010-4801—webappsphp11 oct 2010
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Fusion Mod Mg User Fotoalbum 1.0.1 - SQL Injection
CVE-2010-4791—webappsphp10 oct 2010
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Site2Nite Auto e-Manager - SQL Injection
CVE-2010-4793—webappsasp10 oct 2010
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Community Builder Enhanced (CBE) 1.4.8/1.4.9/1.4.10 - Local File Inclusion / Remote Code Execution
CVE-2010-5280—webappsphp09 oct 2010
Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 f
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ClamAV Milter - Blackhole-Mode Remote Code Execution (Metasploit)
CVE-2007-4560—remotelinux09 oct 2010
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JS Calendar 1.5.1 - Multiple Vulnerabilities
CVE-2010-4794—webappsphp09 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
UFO: Alien Invasion IRC Client (OSX) - Remote Buffer Overflow (Metasploit)
CVE-2010-2309—remoteosx09 oct 2010
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗
← anteriorpágina 174 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.