Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.001exploits catalogados

40.084CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.989Exploit-DB 24.488GitHub PoC 17.519VulnCheck XDB 9945Nuclei 4531Metasploit 3529✓ solo verificadosrecientes populares riesgo

24.488 exploits

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5380MEDIUMlocalwindows06 sep 2013

Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-leve

33RIESGO

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5377—localwindows06 sep 2013

Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the t

23RIESGO

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5379HIGHlocalwindows06 sep 2013

Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top

41RIESGO

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5378—localwindows06 sep 2013

Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-lev

23RIESGO

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5381—localwindows06 sep 2013

Untrusted search path vulnerability in the installation functionality in PHP 5.3.17, when installed in the top-level C:\

23RIESGO

Exploit-DB✓ VexDay Proof

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)

CVE-2012-5382—localwindows06 sep 2013

Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the to

23RIESGO

Exploit-DB✓ VexDay Proof

HP LoadRunner - lrFileIOService ActiveX WriteFileString Remote Code Execution (Metasploit)

CVE-2013-4798—remotewindows04 sep 2013

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

50RIESGO

Exploit-DB

Apple Safari 6.0.1 for iOS 6.0 / Apple Mac OSX 10.7/8 - Heap Buffer Overflow

CVE-2012-3748—remoteios04 sep 2013

Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary

28RIESGO

Exploit-DB✓ VexDay Proof

GOMPlayer 2.2.53.5169 - '.wav' Crash (PoC)

CVE-2013-5716—doswindows04 sep 2013

Gretech GOM Media Player 2.2.53.5169 and possibly earlier allows remote attackers to cause a denial of service (applicat

23RIESGO

Exploit-DB✓ VexDay Proof

KingView 6.53 - 'KChartXY' ActiveX File Creation / Overwrite

CVE-2013-6128—localwindows04 sep 2013

The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 doe

23RIESGO

Exploit-DB✓ VexDay Proof

KingView 6.53 - 'SuperGrid' Insecure ActiveX Control

CVE-2013-6127—localwindows04 sep 2013

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53

28RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer - CFlatMarkupPointer Use-After-Free (MS13-059) (Metasploit)

CVE-2013-3184—remotewindows04 sep 2013

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

50RIESGO

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5630—webappshardware03 sep 2013

20RIESGO

Exploit-DB

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities

CVE-2013-5673—webappsphp03 sep 2013

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attack

23RIESGO

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5625—webappshardware03 sep 2013

20RIESGO

Exploit-DB

Oracle Java lookUpByteBI - Heap Buffer Overflow

CVE-2013-2470—doswindows03 sep 2013

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 U

28RIESGO

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5627—webappshardware03 sep 2013

20RIESGO

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5624—webappshardware03 sep 2013

20RIESGO

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5621—webappshardware03 sep 2013

20RIESGO

Exploit-DB

WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities

CVE-2013-5672—webappsphp03 sep 2013

Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow re

23RIESGO

Exploit-DB

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

CVE-2013-5622—webappshardware03 sep 2013

20RIESGO

Exploit-DB✓ VexDay Proof

Apple Mac OSX 10.8.4 - Local Privilege Escalation

CVE-2013-1775—localosx30 ago 2013

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypas

38RIESGO

Exploit-DB✓ VexDay Proof

Mozilla Firefox - XMLSerializer Use-After-Free (Metasploit)

CVE-2013-0753—remotewindows29 ago 2013

Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox b

50RIESGO

Exploit-DB✓ VexDay Proof

AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities

CVE-2013-4980—doshardware29 ago 2013

Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possi

23RIESGO

Exploit-DB✓ VexDay Proof

HP LoadRunner - lrFileIOService ActiveX Remote Code Execution (Metasploit)

CVE-2013-2370—remotewindows29 ago 2013

Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown ve

50RIESGO

Exploit-DB✓ VexDay Proof

AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities

CVE-2013-4982—doshardware29 ago 2013

AVTECH AVN801 DVR has a security bypass via the administration login captcha

43RIESGO

Exploit-DB✓ VexDay Proof

Apple Mac OSX - Sudo Password Bypass (Metasploit)

CVE-2013-1775—localosx29 ago 2013

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypas

38RIESGO

Exploit-DB✓ VexDay Proof

VMware - Setuid VMware-mount Unsafe popen(3) (Metasploit)

CVE-2013-1662—locallinux29 ago 2013

vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allo

38RIESGO

Exploit-DB✓ VexDay Proof

AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities

CVE-2013-4981—doshardware29 ago 2013

Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possi

23RIESGO

Exploit-DB✓ VexDay Proof

Aloaha PDF Suite - Remote Stack Buffer Overflow

CVE-2013-4978—remotewindows28 ago 2013

Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to e

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.