Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.566exploits catalogados
39.907CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.846Exploit-DB 24.488GitHub PoC 17.314VulnCheck XDB 9877Nuclei 4513Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
Unreal Tournament 2004 (Windows) - 'secure' Remote Overflow (Metasploit)
CVE-2004-0608—remotewindows20 sep 2010
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle 9i XDB (Windows x86) - HTTP PASS Overflow (Metasploit)
CVE-2003-0727—remotewindows_x8620 sep 2010
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
LightNEasy CMS 3.2.1 - Blind SQL Injection
CVE-2010-3484—webappsphp20 sep 2010
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/Vista/2003 - Metafile Escape() SetAbortProc Code Execution (MS06-001) (Metasploit)
CVE-2005-4560—remotewindows20 sep 2010
The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbit
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenX - 'banner-edit.php' Arbitrary File Upload / PHP Code Execution (Metasploit)
CVE-2009-4098—remotephp20 sep 2010
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticate
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AstonSoft DeepBurner - '.dbr' Path Buffer Overflow (Metasploit)
CVE-2006-6665—localwindows20 sep 2010
Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SmarterMail 7.1.3876 - Directory Traversal
CVE-2010-3486—remotewindows19 sep 2010
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell iPrint Client Browser Plugin - 'call-back-url' Remote Stack Overflow
CVE-2010-1527—remotewindows19 sep 2010
Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BoutikOne 1.0 - SQL Injection
CVE-2010-3479—webappsphp19 sep 2010
SQL injection vulnerability in list.php in BoutikOne 1.0 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Restaurant Guide 1.0.0 - Multiple Vulnerabilities
CVE-2010-4928—webappsphp18 sep 2010
Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allow
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Restaurant Guide 1.0.0 - Multiple Vulnerabilities
CVE-2010-4927—webappsphp18 sep 2010
SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
xt:Commerce Gambio 2008 < 2010 - 'reviews.php' Error-Based SQL Injection
CVE-2010-4954—webappsphp18 sep 2010
SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple QuickTime FLI LinePacket - Remote Code Execution
CVE-2010-0520—doswindows18 sep 2010
Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attacker
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.4 - 'Plugin' EnsureCachedAttrParamArrays Remote Code Execution
CVE-2010-1214—doswindows17 sep 2010
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Netautor Professional 5.5 - 'login2.php' Cross-Site Scripting
CVE-2010-3489—webappsphp17 sep 2010
Cross-site scripting (XSS) vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom (formerly Netautor P
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
mojoportal - Multiple Vulnerabilities
CVE-2010-3602—webappsasp16 sep 2010
Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.27 < 2.6.36 (RedHat x86-64) - 'compat' Local Privilege Escalation
CVE-2010-3081—locallinux_x86-6416 sep 2010
The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Excel - HFPicture Record Parsing Remote Code Execution
CVE-2010-1248—doswindows16 sep 2010
Buffer overflow in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
mojoportal - Multiple Vulnerabilities
CVE-2010-3603—webappsasp16 sep 2010
Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BACnet OPC Client - Local Buffer Overflow (1)
CVE-2010-4740—localwindows16 sep 2010
Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.36-rc4-git2 (x86-64) - 'ia32syscall' Emulation Privilege Escalation
CVE-2010-3301—locallinux_x86-6416 sep 2010
The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP microcms 1.0.1 - Multiple Vulnerabilities
CVE-2010-3481—webappsphp15 sep 2010
Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eNdonesia 8.4 - SQL Injection
CVE-2010-3461—webappsphp15 sep 2010
SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP microcms 1.0.1 - Multiple Vulnerabilities
CVE-2010-3480—webappsphp15 sep 2010
Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Axigen Webmail 1.0.1 - Directory Traversal
CVE-2010-3460—remotewindows15 sep 2010
Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mollify 1.6 - 'index.php' Cross-Site Scripting
CVE-2010-3462—webappsphp15 sep 2010
Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MP3 Workstation 9.2.1.1.2 - Local Overflow (SEH)
CVE-2009-0476—localwindows15 sep 2010
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multple I-Escorts Products - 'escorts_search.php' Cross-Site Scripting
CVE-2009-4864—webappsphp15 sep 2010
Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.8 - 'Math.random()' Cross Domain Information Disclosure
CVE-2010-3171—remoteunix14 sep 2010
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JGen 0.9.33 - SQL Injection
CVE-2010-3422—webappsphp14 sep 2010
SQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
← anteriorpágina 181 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.