Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.386exploits catalogados
36.533CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8883Nuclei 4365Metasploit 3493✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Online Market 2.x - Local File Inclusion
Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers to
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Sweetykeeper 1.5 - Local File Inclusion
Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote atta
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Address Book 1.5.0 - Local File Inclusion
Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attacke
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
YaPiG 0.94.0u - Remote File Inclusion
PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component SermonSpeaker - SQL Injection
SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Web TV 1.0 - Local File Inclusion
Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read ar
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component SermonSpeaker - SQL Injection
SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Arcade Games 1.0 - Local File Inclusion
Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attacker
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Horoscope 1.5.0 - Local File Inclusion
Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attac
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Online Exam 1.5.0 - Local File Inclusion
Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joom
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Advertising 0.25 - Local File Inclusion
Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attacker
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HotNews 0.7.2 - Remote File Inclusion
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion
Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion
Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows re
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component RokModule 1.1 - 'moduleid' Blind SQL Injection
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component RokModule 1.1 - 'moduleid' Blind SQL Injection
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Trellian FTP Client - PASV Buffer Overflow
Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitr
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Elite Gaming Ladders 3.5 - 'match' SQL Injection
SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Multi-Venue Restaurant Menu Manager 1.5.2 - SQL Injection
SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JProject Manager 1.0 - Local File Inclusion
Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for J
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion
Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Jfeedback 1.2 - Local File Inclusion
Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allow
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component TweetLA 1.0.1 - Local File Inclusion
Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to re
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JA Voice 2.0 - Local File Inclusion
Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to rea
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) - 'xattr' Local Privilege Escalation
The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 U
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JAVA Web Start - Arbitrary Command-Line Injection
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion
Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tembria Server Monitor 5.6.0 - Denial of Service
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit)
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.