Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
85.883exploits catalogados
40.037CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
kandalf upper 0.1 - Arbitrary File Upload
Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz B2B trading Marketplace Script - SQL Injection
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Winn Guestbook 2.4 / Winn.ws - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
jetAudio 8.0.0.0 - '.asx' Basic Local Crash (PoC)
Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method
Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.4.10 - 'myps.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax Guestbook 3.50 - Admin Login
Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct requ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Web Wiz NewsPad - Database Disclosure
Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CastRipper (Windows XP SP2) - '.m3u' Local Stack Buffer Overflow
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PBX Phone System 2.x - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Snitz Forums 2000 - Database Disclosure
Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
webMathematica 3 - 'MSP' Script Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Reader / Acrobat - '.PDF' File Overflow
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP2) - Local Buffer Overflow
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Uploader 2.0 - File Disclosure
Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to rea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which rev
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini File Host 1.5 - Arbitrary File Upload
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by upload
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Active Business Directory 2 - 'searchadvance.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CoolPlayer 2.18 - M3U Playlist Buffer Overflow
Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP3) - Local Overflow
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Active PHP BookMarks 1.3 - SQL Injection
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail actio
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
weenCompany - SQL Injection
SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kasseler CMS 1.3.4 Lite - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPhotoalbum 0.5 - SQL Injection
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPhotoalbum - Arbitrary File Upload
Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Angelo-emlak 1.0 - Database Disclosure
Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Calendar 1.1 - 'update08.php?configfile' Traversal Local File Inclusion
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbit
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.