Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.386exploits catalogados
36.533CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8883Nuclei 4365Metasploit 3493✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component WMI 1.5.0 - Local File Inclusion
Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Viscom Software Movie Player Pro SDK ActiveX 6.8 - Remote Buffer Overflow
Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom So
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component OrgChart 1.0.0 - Local File Inclusion
Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
wb news (webmobo) 2.3.3 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component MMS Blog 2.3.0 - Local File Inclusion
Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to r
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache OFBiz - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Openregistrecil 1.02 - Local File Inclusion / Remote File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register_globals is enable
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Online News Paper Manager 1.0 - 'cid' SQL Injection
SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla! allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MIT Kerberos 5 - 'src/kdc/do_tgs_req.c' Ticket Renewal Double-Free Memory Corruption
Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mongoose Web Server 2.8 - Multiple Directory Traversals
Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) cha
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP Operations Manager 8.16 - 'srcvw4.dll' 'LoadFile()'/'SaveFile()' Remote Unicode Stack Overflow (PoC)
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.1
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JTM Reseller 1.9 Beta - SQL Injection
SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to exec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Online News Paper Manager 1.0 - 'cid' SQL Injection
SQL injection vulnerability in the Online News Paper Manager (com_jnewspaper) component 1.0 for Joomla!, when magic_quot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Openregistrecil 1.02 - Local File Inclusion / Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register_globals is enabled,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component GBU Facebook 1.0.5 - SQL Injection
SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TweakFS 1.0 FSX Edition - Stack Buffer Overflow
Stack-based buffer overflow in Create and Extract Zips TweakFS Zip Utility 1.0 for Flight Simulator X (FSX) allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion
Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion
Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! all
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion
Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attack
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion
Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote a
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Archery Scores 1.0.6 - Local File Inclusion
Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joo
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dl_stats - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Matamko 1.01 - Local File Inclusion
Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to rea
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
dl_stats - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in download_proc.php in dl_stats before 2.0 allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion
Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allow
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component ZiMBCore 0.1 - Local File Inclusion
Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager coll
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component iF surfALERT 1.2 - Local File Inclusion
Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attacke
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP RapidKill Pro 5.x - Arbitrary File Upload
Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allo
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1,
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.