Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
85.682exploits catalogados
39.953CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.887Exploit-DB 24.488GitHub PoC 17.378VulnCheck XDB 9888Nuclei 4513Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Asx to Mp3 2.7.5 - Local Stack Overflow
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary cod
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache mod_cgi - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache mod_cgi - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
20RIESGO
abrir ↗Exploit-DB
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RIESGO
abrir ↗Exploit-DB
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗Exploit-DB
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP Network Node Manager I - PMD Buffer Overflow (Metasploit)
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute ar
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ManageEngine OpManager / Social IT - Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in Z
60RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.