Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
85.682exploits catalogados
39.953CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.887Exploit-DB 24.488GitHub PoC 17.378VulnCheck XDB 9888Nuclei 4513Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OSClass 3.4.1 - 'index.php' Local File Inclusion
Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (dot
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash - 'Shellshock' Environment Variables Command Injection
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB
Cart Engine 3.0 - Multiple Vulnerabilities
Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bash - 'Shellshock' Environment Variables Command Injection
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB
Cart Engine 3.0 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Advantech Webaccess - dvs.ocx GetColor Buffer Overflow (Metasploit)
Advantech WebAccess Stack-Based Buffer Overflow
68RIESGO
abrir ↗Exploit-DB
Restaurant Script (PizzaInn Project) - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 a
23RIESGO
abrir ↗Exploit-DB
webEdition 6.3.8.0 (SVN-Revision: 6985) - Directory Traversal
Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EMC AlphaStor Device Manager Opcode 0x75 - Command Injection (Metasploit)
The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LittleSite 0.1 - 'index.php' Local File Inclusion
Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to incl
23RIESGO
abrir ↗Exploit-DB
M/Monit 3.3.2 - Cross-Site Request Forgery
M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers
23RIESGO
abrir ↗Exploit-DB
Livefyre LiveComments Plugin - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB
M/Monit 3.3.2 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authe
23RIESGO
abrir ↗Exploit-DB
ClassApps SelectSurvey.net - Multiple SQL Injections
Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to exec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot
60RIESGO
abrir ↗Exploit-DB
CacheGuard-OS 5.7.7 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aztech Modem Routers - Information Disclosure
Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configurat
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (1)
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.