Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados
40.037CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB
Xerox DocuShare - SQL Injection
CVE-2014-3138—webappshardware15 abr 2014
SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xangati - '/servlet/Installer?file' Directory Traversal
CVE-2014-0358—webappsjsp14 abr 2014
Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read ar
23RIESGO
abrir ↗
Exploit-DB
WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities
CVE-2014-2995—webappsphp14 abr 2014
Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xangati - '/servlet/MGConfigData' Multiple Directory Traversals
CVE-2014-0358—webappsjsp14 abr 2014
Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read ar
23RIESGO
abrir ↗
Exploit-DB
WordPress Plugin Quick Page/Post Redirect 5.0.3 - Multiple Vulnerabilities
CVE-2014-2598—webappsphp14 abr 2014
Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 10 - CMarkup Use-After-Free (MS14-012)
CVE-2014-0322HIGHbajo ataqueremotewindows14 abr 2014
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code v
100RIESGO
abrir ↗
Exploit-DB
WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities
CVE-2014-2559—webappsphp14 abr 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPre
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Xangati XSR / XNR - 'gui_input_test.pl' Remote Command Execution
CVE-2014-0358—webappscgi14 abr 2014
Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read ar
23RIESGO
abrir ↗
Exploit-DB
CubeCart 5.2.8 - Session Fixation
CVE-2014-2341—webappsphp13 abr 2014
Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID
23RIESGO
abrir ↗
Exploit-DB
Sendy 1.1.9.1 - SQL Injection
CVE-2014-100011—webappsphp11 abr 2014
SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (1)
CVE-2014-0346—remotemultiple10 abr 2014
20RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Vtiger - 'Install' Remote Command Execution (Metasploit)
CVE-2014-2268—remotephp10 abr 2014
views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which all
50RIESGO
abrir ↗
Exploit-DB
XCloner Standalone 3.5 - Cross-Site Request Forgery
CVE-2014-2996—webappsphp10 abr 2014
XCloner Standalone 3.5 and earlier, when enable_db_backup and sql_mem are enabled, allows remote authenticated administr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sophos Web Protection Appliance Interface - (Authenticated) Arbitrary Command Execution (Metasploit)
CVE-2014-2849—remoteunix10 abr 2014
The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (1)
CVE-2014-0160HIGHbajo ataqueremotemultiple10 abr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗
Exploit-DB
XCloner Standalone 3.5 - Cross-Site Request Forgery
CVE-2014-2579—webappsphp10 abr 2014
Multiple cross-site request forgery (CSRF) vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sophos Web Protection Appliance Interface - (Authenticated) Arbitrary Command Execution (Metasploit)
CVE-2014-2850—remoteunix10 abr 2014
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrator
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Word - RTF Object Confusion (MS14-017) (Metasploit)
CVE-2014-1761HIGHbajo ataquelocalwindows10 abr 2014
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Offi
100RIESGO
abrir ↗
Exploit-DB
Orbit Open Ad Server 1.1.0 - SQL Injection
CVE-2014-2540—webappsphp10 abr 2014
SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenSSL 1.0.1f TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure (Multiple SSL/TLS Versions)
CVE-2014-0160HIGHbajo ataqueremotemultiple09 abr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenSSL 1.0.1f TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure (Multiple SSL/TLS Versions)
CVE-2014-0346—remotemultiple09 abr 2014
20RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure
CVE-2014-0346—remotemultiple08 abr 2014
20RIESGO
abrir ↗
Exploit-DB
Apple Mac OSX 10.9 - Hard Link Memory Corruption
CVE-2013-6799—dososx08 abr 2014
Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard link
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenSSL TLS Heartbeat Extension - 'Heartbleed' Memory Disclosure
CVE-2014-0160HIGHbajo ataqueremotemultiple08 abr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JIRA Issues Collector - Directory Traversal (Metasploit)
CVE-2014-2314—remotewindows07 abr 2014
Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers t
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHPFox - Access Control Security Bypass
CVE-2013-7196—webappsphp05 abr 2014
static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restric
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ibstat $PATH - Local Privilege Escalation (Metasploit)
CVE-2013-4011—locallinux04 abr 2014
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
38RIESGO
abrir ↗
Exploit-DB
A10 Networks ACOS 2.7.0-P2 (Build 53) - Buffer Overflow (PoC)
CVE-2014-3976—doshardware04 abr 2014
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allow
28RIESGO
abrir ↗
Exploit-DB
WordPress Plugin XCloner 3.1.0 - Cross-Site Request Forgery
CVE-2014-2340—webappsphp04 abr 2014
Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers
23RIESGO
abrir ↗
Exploit-DB
Oracle Identity Manager 11g R2 SP1 (11.1.2.1.0) - Unvalidated Redirects
CVE-2014-2880—webappsphp03 abr 2014
Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.
23RIESGO
abrir ↗
← anteriorpágina 232 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.