Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados
34.432CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientespopularesriesgo
21.497 exploits
Referência✓ VexDay Proof
Eurologon CMS - 'files.php' Arbitrary File Download
CVE-2007-6185—webappsphp
Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files vi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
minimal ablog 0.4 - SQL Injection / Arbitrary File Upload / Authentication Bypass
CVE-2008-6612—webappsphp
Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Apache 2.2.14 mod_isapi - Dangling Pointer Remote SYSTEM
CVE-2010-0425—remotewindows
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2
60RIESGO
abrir ↗
Referência
CVE-2014-4971
CVE-2014-4971—
Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write
43RIESGO
abrir ↗
Referência
CVE-2009-4817
CVE-2009-4817—
Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-2144
CVE-2010-2144—
Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2010-2144
CVE-2010-2144—
Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2015-4075
CVE-2015-4075—
The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted
23RIESGO
abrir ↗
Referência
CVE-2015-4075
CVE-2015-4075—
The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted
23RIESGO
abrir ↗
Referência
CVE-2014-8655
CVE-2014-8655—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r
23RIESGO
abrir ↗
Referência
CVE-2014-8655
CVE-2014-8655—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r
23RIESGO
abrir ↗
Referência✓ VexDay Proof
JAF CMS 4.0 RC1 - 'forum.php' Remote File Inclusion
CVE-2006-7128—webappsphp
PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2015-7893
CVE-2015-7893—
SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaS
23RIESGO
abrir ↗
Referência
CVE-2015-7893
CVE-2015-7893—
SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaS
23RIESGO
abrir ↗
Referência
CVE-2013-6040
CVE-2013-6040HIGH
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.
41RIESGO
abrir ↗
Referência
CVE-2013-6040
CVE-2013-6040HIGH
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.
41RIESGO
abrir ↗
Referência
CVE-2020-5295
CVE-2020-5295MEDIUM
Local File read vulnerability in OctoberCMS
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Fuzzylime CMS 3.0 - Local File Inclusion
CVE-2007-4805—webappsphp
Directory traversal vulnerability in getgalldata.php in fuzzylime (cms) 3.0 and earlier allows remote attackers to inclu
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TeamCalPro 3.1.000 - Multiple Local/Remote File Inclusions
CVE-2007-6554—webappsphp
Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Professional Download Assistant 0.1 - Database Disclosure
CVE-2008-5572—webappsasp
Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, wh
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Download Accelerator Plus DAP 8.x - '.m3u' File Buffer Overflow
CVE-2008-3182—localwindows
Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Download Accelerator Plus DAP 8.x - '.m3u' Local Buffer Overflow
CVE-2008-3182—localwindows
Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CoolPlayer 2.19 - '.Skin' Local Buffer Overflow
CVE-2008-5735—localwindows
Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code
23RIESGO
abrir ↗
Referência
CVE-2013-1594
CVE-2013-1594—
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire
23RIESGO
abrir ↗
Referência
CVE-2013-1594
CVE-2013-1594—
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire
23RIESGO
abrir ↗
Referência
CVE-2010-0456
CVE-2010-0456—
SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2010-0457
CVE-2010-0457—
SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2020-6170
CVE-2020-6170—
An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cl
23RIESGO
abrir ↗
Referência
CVE-2010-0457
CVE-2010-0457—
SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2017-6104
CVE-2017-6104—
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.
23RIESGO
abrir ↗
← anteriorpágina 177 / 717siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.