Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados
40.037CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB
Titan FTP Server 10.32 Build 1816 - Directory Traversal
CVE-2014-1842—webappswindows11 feb 2014
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke
38RIESGO
abrir ↗
Exploit-DB
WordPress Plugin BuddyPress 1.9.1 - Privilege Escalation
CVE-2014-1889—webappsphp11 feb 2014
The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain
28RIESGO
abrir ↗
Exploit-DB
Linux Kernel < 3.4.5 (Android 4.2.2/4.4 ARM) - Local Privilege Escalation
CVE-2013-6282HIGHbajo ataquelocalarm11 feb 2014
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not
98RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
KingScada - kxClientDownload.ocx ActiveX Remote Code Execution (Metasploit)
CVE-2013-2827—remotewindows11 feb 2014
An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before
50RIESGO
abrir ↗
Exploit-DB
Titan FTP Server 10.32 Build 1816 - Directory Traversal
CVE-2014-1843—webappswindows11 feb 2014
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke
38RIESGO
abrir ↗
Exploit-DB
Titan FTP Server 10.32 Build 1816 - Directory Traversal
CVE-2014-1841—webappswindows11 feb 2014
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke
38RIESGO
abrir ↗
Exploit-DB
ZTE ZXV10 W300 Router - Hard-Coded Credentials
CVE-2014-0329—webappshardware09 feb 2014
The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Publish-It 3.6d - '.pui' Local Buffer Overflow (SEH)
CVE-2014-0980—localwindows08 feb 2014
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI f
50RIESGO
abrir ↗
Exploit-DB
CTERA 3.2.29.0/3.2.42.0 - Persistent Cross-Site Scripting
CVE-2013-2639—webappsphp07 feb 2014
Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote
23RIESGO
abrir ↗
Exploit-DB
doorGets CMS 5.2 - SQL Injection
CVE-2014-1459—webappsphp07 feb 2014
SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administra
23RIESGO
abrir ↗
Exploit-DB
AuraCMS 2.3 - Multiple Vulnerabilities
CVE-2014-1401—webappsphp07 feb 2014
Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Android Browser and WebView addJavascriptInterface - Code Execution (Metasploit)
CVE-2013-4710—remotehardware07 feb 2014
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly imp
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
osCommerce 2.3.3.4 - 'geo_zones.php?zID' SQL Injection
CVE-2014-10033—webappsphp07 feb 2014
SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.3
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Publish-It 3.6d - Buffer Overflow
CVE-2014-0980—doswindows06 feb 2014
Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI f
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat Manager - Application Upload (Authenticated) Code Execution (Metasploit)
CVE-2009-3548—remotemultiple05 feb 2014
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a
60RIESGO
abrir ↗
Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
CVE-2013-7055—webappshardware05 feb 2014
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure
23RIESGO
abrir ↗
Exploit-DB
VideoLAN VLC Media Player 2.1.2 - '.asf' Crash (PoC)
CVE-2014-1684—dosmultiple05 feb 2014
The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Playe
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Skybluecanvas CMS - Remote Code Execution (Metasploit)
CVE-2014-1683—remotelinux05 feb 2014
The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248
50RIESGO
abrir ↗
Exploit-DB
TopicsViewer 3.0 Beta 1 - Multiple Vulnerabilities
CVE-2014-10023—webappsphp05 feb 2014
Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Exploit-DB
ownCloud 6.0.0a - Multiple Vulnerabilities
CVE-2014-1665—webappsphp05 feb 2014
Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
XnView 1.92.1 - Command-Line Arguments Buffer Overflow
CVE-2008-1461—remotewindows05 feb 2014
Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename arg
28RIESGO
abrir ↗
Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
CVE-2013-7052—webappshardware05 feb 2014
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script
28RIESGO
abrir ↗
Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
CVE-2013-7051—webappshardware05 feb 2014
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters
28RIESGO
abrir ↗
Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
CVE-2013-7053—webappshardware05 feb 2014
D-Link DIR-100 4.03B07: cli.cgi CSRF
23RIESGO
abrir ↗
Exploit-DB
D-Link DIR-100 - Multiple Vulnerabilities
CVE-2013-7054—webappshardware05 feb 2014
D-Link DIR-100 4.03B07: cli.cgi XSS
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Struts - Developer Mode OGNL Execution (Metasploit)
CVE-2012-0394—remotejava05 feb 2014
The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ImpressCMS 1.3.5 - Multiple Vulnerabilities
CVE-2014-1836—webappsphp05 feb 2014
Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Seowon Intech WiMAX SWC-9100 Router - '/cgi-bin/diagnostic.cgi?ping_ipaddr' Remote Code Execution
CVE-2013-7179—remotecgi03 feb 2014
The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Seowon Intech WiMAX SWC-9100 Router - '/cgi-bin/reboot.cgi' Remote Reboot (Denial of Service)
CVE-2013-7183—doscgi03 feb 2014
cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) v
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.10) - 'CONFIG_X86_X32' Arbitrary Write (2)
CVE-2014-0038—locallinux02 feb 2014
The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo
50RIESGO
abrir ↗
← anteriorpágina 237 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.