Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
85.566exploits catalogados
39.907CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.846Exploit-DB 24.488GitHub PoC 17.314VulnCheck XDB 9877Nuclei 4513Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Bonita BPM 6.5.1 - Multiple Vulnerabilities
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arb
23RIESGO
abrir ↗Exploit-DB
SysAid Help Desk 14.4 - Multiple Vulnerabilities
SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a lar
23RIESGO
abrir ↗Exploit-DB
ISPConfig 3.0.5.4p6 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijac
23RIESGO
abrir ↗Exploit-DB
SysAid Help Desk 14.4 - Multiple Vulnerabilities
SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers t
50RIESGO
abrir ↗Exploit-DB
Libmimedir - '.VCF' Memory Corruption (PoC)
libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file,
28RIESGO
abrir ↗Exploit-DB
ISPConfig 3.0.5.4p6 - Multiple Vulnerabilities
SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated user
23RIESGO
abrir ↗Exploit-DB
SysAid Help Desk 14.4 - Multiple Vulnerabilities
Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators t
50RIESGO
abrir ↗Exploit-DB
HP WebInspect 10.4 - XML External Entity Injection
Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to by
23RIESGO
abrir ↗Exploit-DB
SysAid Help Desk 14.4 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary
23RIESGO
abrir ↗Exploit-DB
SysAid Help Desk 14.4 - Multiple Vulnerabilities
The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote at
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RIESGO
abrir ↗Exploit-DB
ICU library 52 < 54 - Multiple Vulnerabilities
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in I
28RIESGO
abrir ↗Exploit-DB
ICU library 52 < 54 - Multiple Vulnerabilities
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in I
28RIESGO
abrir ↗Exploit-DB
SysAid Help Desk 14.4 - Multiple Vulnerabilities
SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensi
43RIESGO
abrir ↗Exploit-DB
SysAid Help Desk 14.4 - Multiple Vulnerabilities
SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the account
50RIESGO
abrir ↗Exploit-DB
Alcatel-Lucent OmniSwitch - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web int
23RIESGO
abrir ↗Exploit-DB
SysAid Help Desk 14.4 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrar
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Milw0rm Clone Script 1.0 - 'related.php?program' Blind SQL Injection
SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - 'doupload.php' Arbitrary File Upload
Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress
28RIESGO
abrir ↗Exploit-DB
WordPress Plugin zM Ajax Login & Register 1.0.9 - Local File Inclusion
Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attack
28RIESGO
abrir ↗Exploit-DB
WordPress Plugin zM Ajax Login & Register 1.0.9 - Local File Inclusion
Cross-site scripting (XSS) vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SysAid Help Desk Administrator Portal < 14.4 - Arbitrary File Upload (Metasploit)
Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators t
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Realtek SDK - Miniigd UPnP SOAP Command Execution (Metasploit)
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link Devices - HNAP SOAPAction-Header Command Execution (Metasploit)
The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute ar
100RIESGO
abrir ↗Exploit-DB
Aruba ClearPass Policy Manager - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Airties - login-cgi Buffer Overflow (Metasploit)
Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 502
60RIESGO
abrir ↗Exploit-DB
Peercast < 0.1211 - Format String
Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format
28RIESGO
abrir ↗Exploit-DB
WordPress Plugin Free Counter 1.1 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendio ESP - Information Disclosure
The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.