Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados
34.432CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
OP5 5.3.5/5.4.0/5.4.2/5.5.0/5.5.1 - 'welcome' Remote Command Execution (Metasploit)
CVE-2012-0262—webappsmultiple05 ene 2015
op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers
60RIESGO
abrir ↗
Exploit-DB
Crea8Social 2.0 - Cross-Site Scripting Change Interface
CVE-2015-1054—webappsphp04 ene 2015
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to in
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution
CVE-2014-9583—remotehardware04 ene 2015
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
e107 2 Bootstrap CMS - Cross-Site Scripting
CVE-2015-1057—webappsphp03 ene 2015
Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB
PhotoPost < 4.85 - Multiple Vulnerabilities
CVE-2005-0274—webappsphp03 ene 2015
Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers t
23RIESGO
abrir ↗
Exploit-DB
PhotoPost < 4.85 - Multiple Vulnerabilities
CVE-2005-0273—webappsphp03 ene 2015
Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arb
23RIESGO
abrir ↗
Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
CVE-2005-0270—webappsphp02 ene 2015
Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject a
23RIESGO
abrir ↗
Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
CVE-2005-0272—webappsphp02 ene 2015
ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review fil
23RIESGO
abrir ↗
Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
CVE-2005-0271—webappsphp02 ene 2015
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB
Absolut Engine 1.73 - Multiple Vulnerabilities
CVE-2014-9435—webappsphp01 ene 2015
Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 8.1 (x86/x64) - 'ahcache.sys' NtApphelpCacheControl Privilege Escalation
CVE-2015-0002—localwindows01 ene 2015
The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1,
43RIESGO
abrir ↗
Exploit-DB
Absolut Engine 1.73 - Multiple Vulnerabilities
CVE-2014-9434—webappsphp01 ene 2015
Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.7
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ProjectSend - Arbitrary File Upload (Metasploit)
CVE-2014-9567—remotephp31 dic 2014
Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows rem
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting
CVE-2014-9516—webappsphp31 dic 2014
Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB
PHP-Calendar < 0.10.1 - Arbitrary File Inclusion
CVE-2004-1423—webappsphp29 dic 2014
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth o
28RIESGO
abrir ↗
Exploit-DB
Easy File Sharing Web Server 6.8 - Persistent Cross-Site Scripting
CVE-2014-9439—webappsphp27 dic 2014
Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
CVE-2004-1422—webappsphp27 dic 2014
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php s
23RIESGO
abrir ↗
Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
CVE-2004-1421—webappsphp27 dic 2014
Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php in
23RIESGO
abrir ↗
Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
CVE-2004-1420—webappsphp27 dic 2014
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote atta
23RIESGO
abrir ↗
Exploit-DB
PMB 4.1.3 - (Authenticated) SQL Injection
CVE-2014-9457—webappsphp27 dic 2014
SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users
23RIESGO
abrir ↗
Exploit-DB
PHPMyRecipes 1.2.2 - 'browse.php?category' SQL Injection
CVE-2014-9440—webappsphp23 dic 2014
SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Exploit-DB
NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
CVE-2014-5216—webappsjsp23 dic 2014
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote atta
23RIESGO
abrir ↗
Exploit-DB
SysAid Server - Arbitrary File Disclosure
CVE-2014-9436—webappswindows23 dic 2014
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files
23RIESGO
abrir ↗
Exploit-DB
GParted 0.14.1 - OS Command Execution
CVE-2014-7208—locallinux23 dic 2014
GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in
23RIESGO
abrir ↗
Exploit-DB
NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
CVE-2014-9412—webappsjsp23 dic 2014
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Notepad++ 6.6.9 - Buffer Overflow
CVE-2014-1004—doswindows22 dic 2014
20RIESGO
abrir ↗
Exploit-DB
PsychoStats < 2.2.4 Beta - Cross Site Scripting
CVE-2004-1417—localwindows22 dic 2014
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to i
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Notepad++ 6.6.9 - Buffer Overflow
CVE-2014-9456—doswindows22 dic 2014
Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long Time attribute in an Ev
28RIESGO
abrir ↗
Exploit-DB
Ettercap 0.8.0 < 0.8.1 - Multiple Denial of Service Vulnerabilities
CVE-2014-6395—doslinux19 dic 2014
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 a
28RIESGO
abrir ↗
Exploit-DB
ProjectSend r561 - Multiple Vulnerabilities
CVE-2011-3713—webappsphp19 dic 2014
cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the
23RIESGO
abrir ↗
← anteriorpágina 205 / 815siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.