Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados
34.432CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientespopularesriesgo
21.497 exploits
Referência
CVE-2014-1636
CVE-2014-1636—
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗
Referência
CVE-2010-2042
CVE-2010-2042—
SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência
CVE-2013-4630
CVE-2013-4630—
Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allow
23RIESGO
abrir ↗
Referência
CVE-2019-1642
CVE-2019-1642MEDIUM
Cisco Firepower Management Center Cross-Site Scripting Vulnerability
33RIESGO
abrir ↗
Referência
CVE-2018-20503
CVE-2018-20503—
Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.
23RIESGO
abrir ↗
Referência
CVE-2018-20503
CVE-2018-20503—
Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.
23RIESGO
abrir ↗
Referência
CVE-2012-10060
CVE-2012-10060CRITICAL
Sysax Multi Server < 5.55 SSH Username Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2012-10060
CVE-2012-10060CRITICAL
Sysax Multi Server < 5.55 SSH Username Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2009-4146
CVE-2009-4146—
The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not c
38RIESGO
abrir ↗
Referência
CVE-2012-5388
CVE-2012-5388—
Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remo
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Etomite CMS 0.6.1 - 'rfiles.php' Remote Command Execution
CVE-2006-7070—webappsphp
Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier all
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Stats 0.1.9.2 - Multiple Vulnerabilities
CVE-2007-5453—webappsphp
Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Andy's PHP KnowledgeBase 0.92.9 - Arbitrary File Upload
CVE-2008-6513—webappsphp
Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2017-8479
CVE-2017-8479—
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,
23RIESGO
abrir ↗
Referência
CVE-2017-8481
CVE-2017-8481—
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,
23RIESGO
abrir ↗
Referência
CVE-2010-2044
CVE-2010-2044—
SQL injection vulnerability in the Konsultasi (com_konsultasi) component 1.0.0 for Joomla! allows remote attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2006-1747
CVE-2006-1747—
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗
Referência
CVE-2010-2044
CVE-2010-2044—
SQL injection vulnerability in the Konsultasi (com_konsultasi) component 1.0.0 for Joomla! allows remote attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2010-2051
CVE-2010-2051—
SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2010-2051
CVE-2010-2051—
SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2005-4696
CVE-2005-4696—
The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-s
23RIESGO
abrir ↗
Referência
CVE-2018-10310
CVE-2018-10310—
A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Conse
23RIESGO
abrir ↗
Referência
CVE-2018-10310
CVE-2018-10310—
A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Conse
23RIESGO
abrir ↗
Referência
CVE-2014-9311
CVE-2014-9311—
Cross-site scripting (XSS) vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows remo
23RIESGO
abrir ↗
Referência
CVE-2018-17428
CVE-2018-17428—
An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio par
23RIESGO
abrir ↗
Referência
CVE-2019-11416
CVE-2019-11416—
A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstr
23RIESGO
abrir ↗
Referência
CVE-2019-11416
CVE-2019-11416—
A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstr
23RIESGO
abrir ↗
Referência
CVE-2013-4950
CVE-2013-4950—
Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Referência
CVE-2011-5228
CVE-2011-5228—
Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote att
23RIESGO
abrir ↗
Referência
CVE-2012-2939
CVE-2012-2939—
Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute
23RIESGO
abrir ↗
← anteriorpágina 184 / 717siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.