Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.778exploits catalogados
36.769CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.475Referência 23.305GitHub PoC 15.194VulnCheck XDB 8932Nuclei 4379Metasploit 3493✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component JoomlaFacebook - SQL Injection
SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_facebook - SQL Injection
SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BPHolidayLettings 1.0 - Blind SQL Injection
Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BPLawyerCaseDocuments - SQL Injection
SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.365 - 'forum.asp' SQL Injection
Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J-Web Interface - 'scripter.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authen
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component Tupinambis - SQL Injection
SQL injection vulnerability in the Tupinambis (com_tupinambis) component 1.0 for Mambo and Joomla! allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J-Web Interface - '/diagnose' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authen
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J - Web Interface 'PATH_INFO' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection
SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iTunes 9.0 - '.pls' Buffer Overflow
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of serv
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_mytube (user_id) 1.0 Beta - Blind SQL Injection
SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BigAnt Server 2.50 SP6 - '.zip' Local Buffer Overflow (PoC) (2)
Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WX Guestbook 1.1.208 - SQL Injection / Persistent Cross-Site Scripting
Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WX Guestbook 1.1.208 - SQL Injection / Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DDL CMS 1.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_surveymanager 1.5.0 - 'stype' SQL Injection
SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla!
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FFmpeg 0.5 - Multiple Remote Vulnerabilities
FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Loggix Project 9.4.5 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_jbudgetsmagic 0.3.2 < 0.4.0 - 'bid' SQL Injection
SQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4.0 for Joomla! allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_jinc 0.2 - 'newsid' Blind SQL Injection
SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BAnner ROtation System mini - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProdLer 2.0 - Remote File Inclusion
PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMScontrol (Content Management Portal Solutions) - SQL Injection
SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cP Creator 2.7.1 - SQL Injection
SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xerver HTTP Server 4.32 - Remote Denial of Service
The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter applic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Network Management/Inventory System - 'header.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FSphp 0.2.1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zainu 1.0 - SQL Injection
SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.