Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados
34.432CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB
WordPress Plugin Another WordPress Classifieds Plugin - SQL Injection
CVE-2014-10013—webappsphp10 nov 2014
SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB
WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities
CVE-2014-8604—webappsphp10 nov 2014
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in th
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
vldPersonals 2.7 - Multiple Vulnerabilities
CVE-2014-9005—webappsphp10 nov 2014
Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2014-8954—webappsphp10 nov 2014
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Exploit-DB
WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities
CVE-2014-8606—webappsphp10 nov 2014
Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administ
23RIESGO
abrir ↗
Exploit-DB
PHP-Fusion 7.02.07 - SQL Injection
CVE-2014-8596—webappsphp10 nov 2014
Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB
WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities
CVE-2014-8603—webappsphp10 nov 2014
cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to exe
23RIESGO
abrir ↗
Exploit-DB
ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities
CVE-2014-7868—webappsmultiple09 nov 2014
Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT
45RIESGO
abrir ↗
Exploit-DB
ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities
CVE-2014-7866—webappsmultiple09 nov 2014
Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and
45RIESGO
abrir ↗
Exploit-DB
ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities
CVE-2014-6034—webappsmultiple09 nov 2014
Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in Z
60RIESGO
abrir ↗
Exploit-DB
ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities
CVE-2014-6036—webappsmultiple09 nov 2014
Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Socia
35RIESGO
abrir ↗
Exploit-DB
ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities
CVE-2014-6035—webappsmultiple09 nov 2014
Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, 11.3, and earlier al
28RIESGO
abrir ↗
Exploit-DB
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
CVE-2014-3437—webappsjsp06 nov 2014
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Citrix Netscaler SOAP Handler - Remote Code Execution (Metasploit)
CVE-2014-7140—remotebsd06 nov 2014
Unspecified vulnerability in the management interface in Citrix NetScaler Application Delivery Controller (ADC) and NetS
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
X7 Chat 2.0.5 - 'message.php' PHP Code Execution (Metasploit)
CVE-2014-8998—remotephp06 nov 2014
lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a c
50RIESGO
abrir ↗
Exploit-DB
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
CVE-2014-3439—webappsjsp06 nov 2014
ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitr
23RIESGO
abrir ↗
Exploit-DB
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
CVE-2014-3438—webappsjsp06 nov 2014
Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Belkin N750 - 'jump?login' Remote Buffer Overflow
CVE-2014-1635—remotehardware06 nov 2014
Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote a
50RIESGO
abrir ↗
Exploit-DB
MODx CMS 2.2.14 - Cross-Site Request Forgery Bypass / Reflected Cross-Site Scripting / Persistent Cross-Site Scripting
CVE-2014-8775—webappsphp05 nov 2014
MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, whic
23RIESGO
abrir ↗
Exploit-DB
ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)
CVE-2014-6038—webappsmultiple05 nov 2014
Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerabili
60RIESGO
abrir ↗
Exploit-DB
MODx CMS 2.2.14 - Cross-Site Request Forgery Bypass / Reflected Cross-Site Scripting / Persistent Cross-Site Scripting
CVE-2014-8774—webappsphp05 nov 2014
Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attacke
23RIESGO
abrir ↗
Exploit-DB
ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)
CVE-2014-6039—webappsmultiple05 nov 2014
ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed versio
50RIESGO
abrir ↗
Exploit-DB
MODx CMS 2.2.14 - Cross-Site Request Forgery Bypass / Reflected Cross-Site Scripting / Persistent Cross-Site Scripting
CVE-2014-8773—webappsphp05 nov 2014
MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Remote Code Execution)
CVE-2014-3704—webappsphp03 nov 2014
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct
60RIESGO
abrir ↗
Exploit-DB
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
CVE-2014-6271CRITICALbajo ataquewebappsphp03 nov 2014
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗
Exploit-DB
Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Admin Session)
CVE-2014-3704—webappsphp03 nov 2014
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct
60RIESGO
abrir ↗
Exploit-DB
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
CVE-2014-3671—webappsphp03 nov 2014
20RIESGO
abrir ↗
Exploit-DB
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
CVE-2014-3659—webappsphp03 nov 2014
20RIESGO
abrir ↗
Exploit-DB
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
CVE-2014-7227—webappsphp03 nov 2014
20RIESGO
abrir ↗
Exploit-DB
PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection
CVE-2014-7196—webappsphp03 nov 2014
20RIESGO
abrir ↗
← anteriorpágina 210 / 815siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.