Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.566exploits catalogados

39.907CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.846Exploit-DB 24.488GitHub PoC 17.314VulnCheck XDB 9877Nuclei 4513Metasploit 3528✓ solo verificadosrecientes populares riesgo

24.488 exploits

Exploit-DB✓ VexDay Proof

WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities

CVE-2015-4065—webappsphp26 may 2015

Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before

23RIESGO

Exploit-DB✓ VexDay Proof

WordPress Plugin NewStatPress 0.9.8 - Multiple Vulnerabilities

CVE-2015-4063—webappsphp26 may 2015

Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPres

38RIESGO

Exploit-DB✓ VexDay Proof

WordPress Plugin NewStatPress 0.9.8 - Multiple Vulnerabilities

CVE-2015-4062—webappsphp26 may 2015

SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remo

38RIESGO

Exploit-DB✓ VexDay Proof

Sendio ESP - Information Disclosure

CVE-2014-8391—webappsjsp26 may 2015

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to o

23RIESGO

Exploit-DB

Apache JackRabbit - WebDAV XML External Entity

CVE-2015-1833—webappsjava26 may 2015

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.

35RIESGO

Exploit-DB

WordPress Plugin church_admin 0.800 - Persistent Cross-Site Scripting

CVE-2015-4127—webappsphp26 may 2015

Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers t

38RIESGO

Exploit-DB✓ VexDay Proof

Sendio ESP - Information Disclosure

CVE-2014-0999—webappsjsp26 may 2015

Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive

23RIESGO

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0003—localwindows25 may 2015

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

23RIESGO

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0058—localwindows25 may 2015

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and

23RIESGO

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0059—localwindows25 may 2015

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

28RIESGO

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0010—localwindows25 may 2015

The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in M

23RIESGO

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0060—localwindows25 may 2015

The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Window

23RIESGO

Exploit-DB

Microsoft Windows - Local Privilege Escalation (MS15-010)

CVE-2015-0057—localwindows25 may 2015

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

28RIESGO

Exploit-DB

Apport (Ubuntu 14.04/14.10/15.04) - Race Condition Privilege Escalation

CVE-2015-1325—locallinux23 may 2015

Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ub

23RIESGO

Exploit-DB✓ VexDay Proof

Fuse 2.9.3-15 - Local Privilege Escalation

CVE-2015-3202—locallinux23 may 2015

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as ro

23RIESGO

Exploit-DB

WordPress Plugin WP Membership 1.2.3 - Multiple Vulnerabilities

CVE-2015-4038—webappsphp21 may 2015

The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an i

23RIESGO

Exploit-DB

WordPress Plugin WP Membership 1.2.3 - Multiple Vulnerabilities

CVE-2015-4039—webappsphp21 may 2015

Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authent

23RIESGO

Exploit-DB

WordPress Plugin WP Symposium 15.1 - '&show=' SQL Injection

CVE-2015-3325—webappsphp21 may 2015

SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to

23RIESGO

Exploit-DB

Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation

CVE-2014-7872—localwindows20 may 2015

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges

23RIESGO

Exploit-DB✓ VexDay Proof

Phoenix Contact ILC 150 ETH PLC - Remote Control Script

CVE-2014-9195—remotehardware20 may 2015

Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function

85RIESGO

Exploit-DB✓ VexDay Proof

WordPress Plugin FeedWordPress 2015.0426 - SQL Injection

CVE-2015-4018—webappsphp20 may 2015

SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for W

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows 8.0/8.1 (x64) - 'TrackPopupMenu' Local Privilege Escalation (MS14-058)

CVE-2014-4113HIGHbajo ataquelocalwindows_x86-6419 may 2015

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1679—localwindows18 may 2015

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1701HIGHbajo ataqueransomwarelocalwindows18 may 2015

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RIESGO

Exploit-DB

ElasticSearch < 1.4.5 / < 1.5.2 - Directory Traversal

CVE-2015-3337—webappsphp18 may 2015

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a

50RIESGO

Exploit-DB

BulletProof FTP Client 2010 - Local Buffer Overflow (DEP Bypass)

CVE-2008-5753—localwindows18 may 2015

Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1678—localwindows18 may 2015

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win

23RIESGO

Exploit-DB

Microsoft Windows - 'CNG.SYS' Kernel Security Feature Bypass (MS15-052)

CVE-2015-1674—localwindows18 may 2015

The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not pr

23RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows - Local Privilege Escalation (MS15-051)

CVE-2015-1677—localwindows18 may 2015

The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win

23RIESGO

Exploit-DB

QEMU - Floppy Disk Controller (FDC) (PoC)

CVE-2015-3456—dosmultiple18 may 2015

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a

28RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.