Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.001exploits catalogados
40.084CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.989Exploit-DB 24.488GitHub PoC 17.519VulnCheck XDB 9945Nuclei 4531Metasploit 3529✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB
Loftek Nexus 543 IP Cameras - Multiple Vulnerabilities
The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Endeca Server - Remote Command Execution (Metasploit)
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cm3 Acora CMS - 'top.aspx' Information Disclosure
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Winamp 5.63 - 'winamp.ini' Local Overflow
Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SearchBlox - Multiple Information Disclosure Vulnerabilities
servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords v
23RIESGO
abrir ↗Exploit-DB
DeWeS 0.4.2 - Directory Traversal
Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote
23RIESGO
abrir ↗Exploit-DB
Netgear ProSafe - Information Disclosure
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 7.9.4 - Multiple Vulnerabilities
SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB
Netgear ProSafe - Denial of Service
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier, GS748Tv4 5.4.1.14, and GS510TP 5.0.4.4 allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 7.9.4 - Multiple Vulnerabilities
SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB
Samba 3.5.22/3.6.17/4.0.8 - nttrans Reply Integer Overflow
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Foreman (RedHat OpenStack/Satellite) - users/create Mass Assignment (Metasploit)
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users w
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VMware - Setuid VMware-mount Popen lsb_release Privilege Escalation
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allo
38RIESGO
abrir ↗Exploit-DB
Samsung DVR Firmware 1.10 - Authentication Bypass
Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID v
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Graphite Web - Unsafe Pickle Handling (Metasploit)
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xibo - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attac
23RIESGO
abrir ↗Exploit-DB
Samsung DVR Firmware 1.10 - Authentication Bypass
Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xibo - 'layout' HTML Injection
Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Twilight CMS - DeWeS Web Server Directory Traversal
Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote
23RIESGO
abrir ↗Exploit-DB
Adobe ColdFusion 9 - Administrative Authentication Bypass
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and pos
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PCMan FTP Server 2.07 - 'STOR' Remote Buffer Overflow
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RIESGO
abrir ↗Exploit-DB
IBM 1754 GCM 1.18.0.22011 - Remote Command Execution
ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avoce
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Java - 'storeImageArray()' Invalid Array Indexing (Metasploit)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 U
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 2.0.8 - '.m3u' Local Crash (PoC)
VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to cause a denial of service (crash) and possibly ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AlgoSec Firewall Analyzer - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attacke
23RIESGO
abrir ↗Exploit-DB
KCFinder 2.51 - Local File Disclosure
Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DotNetNuke DNNArticle Module 10.0 - SQL Injection
SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Media Manager - Arbitrary File Upload (Metasploit)
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ultra Mini HTTPd - Remote Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.