Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.596exploits catalogados
36.656CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.475Referência 23.212GitHub PoC 15.164VulnCheck XDB 8883Nuclei 4369Metasploit 3493✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection
SQL injection vulnerability in country_escorts.php in I-Escorts Directory Script allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UranyumSoft Ýlan Servisi - Database Disclosure
UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
e-topbiz Slide Popups 1 PHP - Authentication Bypass
SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection
SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LiveZilla 3.1.8.3 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RoseOnlineCMS 3 B1 - 'admin' Local File Inclusion
Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is dis
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper 3.0.1.1 - '.pls' Universal Buffer Overflow
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component iF Portfolio Nexus - 'Controller' Remote File Inclusion
Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_if_nexus - Remote File Inclusion
Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreePBX 2.5.2 - '/admin/config.php?tech' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreePBX 2.5.2 - Zap Channel Addition Description Parameter Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_qpersonel - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component FacileForms - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper 3.0.1.1 - '.pls' Universal Local Buffer Overflow
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_beeheard - Blind SQL Injection
SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_dhforum - SQL Injection
SQL injection vulnerability in the DhForum (com_dhforum) component for Joomla! allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dream4 Koobi Pro 6.1 Gallery - 'img_id' SQL Injection
SQL injection vulnerability in index.php in dream4 Koobi 4.4 and 5.4 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)
Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a d
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kandalf upper 0.1 - Arbitrary File Upload
Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpPowerCards 2.0 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection
SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
paFileDB 3.1 - Cross-Site Scripting
Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CactuShop 6.0 - Database Disclosure
Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
paFileDB 3.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP Application Recovery Manager - 'OmniInet.exe' Remote Buffer Overflow
Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
paFileDB 3.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flatpress - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.1 < 6.2 - 'configdir' Remote Command Execution (Metasploit)
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPInstantGallery 1.1 - 'admin.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitra
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.