Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
85.566exploits catalogados
39.907CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.846Exploit-DB 24.488GitHub PoC 17.314VulnCheck XDB 9877Nuclei 4513Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - Local Privilege Escalation (MS15-051)
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local
98RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Local Privilege Escalation (MS15-051)
The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win
23RIESGO
abrir ↗Exploit-DB
Burning Board < 2.3.1 - SQL Injection
SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attacker
23RIESGO
abrir ↗Exploit-DB
D-Link DSL-500B Gen 2 - Parental Control Configuration Panel Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated use
75RIESGO
abrir ↗Exploit-DB
D-Link DSL-500B Gen 2 - URL Filter Configuration Panel Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated use
75RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - domainMemory ByteArray Use-After-Free (Metasploit)
Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and
60RIESGO
abrir ↗Exploit-DB
SynaMan 3.4 Build 1436 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Sy
23RIESGO
abrir ↗Exploit-DB
SynTail 1.5 Build 566 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Sy
23RIESGO
abrir ↗Exploit-DB
Xeams 4.5 Build 5755 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier
23RIESGO
abrir ↗Exploit-DB
Syncrify Server 3.6 Build 833 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Sy
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - NetConnection Type Confusion (Metasploit)
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin RevSlider 3.0.95 - Arbitrary File Upload / Execution (Metasploit)
The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management - Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11
60RIESGO
abrir ↗Exploit-DB
IBM Websphere Portal - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.0 through 6.1.0.6 CF27, 6.1.5.0 through 6.1.5.3 C
23RIESGO
abrir ↗Exploit-DB
Dell SonicWALL Secure Remote Access (SRA) Appliance - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products
23RIESGO
abrir ↗Exploit-DB
Invision Power Board (IP.Board) < 2.0.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and e
23RIESGO
abrir ↗Exploit-DB
Invision Power Board (IP.Board) < 2.0.3 - Multiple Vulnerabilities
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary
28RIESGO
abrir ↗Exploit-DB
Apache Xerces-C XML Parser < 3.1.2 - Denial of Service (PoC)
internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentatio
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - UncompressViaZlibVariant Uninitialized Memory (Metasploit)
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on
60RIESGO
abrir ↗Exploit-DB
Foxit Reader PDF 7.1.3.320 - Parsing Memory Corruption
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory
23RIESGO
abrir ↗Exploit-DB
WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities
The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1
28RIESGO
abrir ↗Exploit-DB
WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional Wo
23RIESGO
abrir ↗Exploit-DB
WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPr
23RIESGO
abrir ↗Exploit-DB
WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities
Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 4.2 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to i
28RIESGO
abrir ↗Exploit-DB
OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15,
23RIESGO
abrir ↗Exploit-DB
MiniUPnPd 1.0 (MIPS) - Remote Stack Overflow Remote Code Execution for AirTies RT Series
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 2.8 (Windows 7) - '.wav' File Buffer Overflow (SEH) (DEP Bypass)
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 2.8 - '.wav' File Buffer Overflow (SEH)
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RIESGO
abrir ↗Exploit-DB
usb-creator 0.2.x (Ubuntu 12.04/14.04/14.10) - Local Privilege Escalation
usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubu
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.