Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

24.443 exploits

Exploit-DB✓ VexDay Proof

OpenEMR 4.1 - 'note' HTML Injection

CVE-2013-4620—webappsphp12 jul 2013

Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEMR 4.1.1 allows remot

23RIESGO

Exploit-DB✓ VexDay Proof

WordPress Plugin Pie Register - 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities

CVE-2013-4954—webappsphp12 jul 2013

Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before

23RIESGO

Exploit-DB✓ VexDay Proof

Ultra Mini HTTPd 1.21 - Remote Stack Buffer Overflow

CVE-2013-5019—remotewindows11 jul 2013

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour

50RIESGO

Exploit-DB✓ VexDay Proof

WordPress Plugin miniBB - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities

CVE-2013-5020—webappsphp11 jul 2013

Multiple cross-site scripting (XSS) vulnerabilities in bb_admin.php in MiniBB before 3.0.1 allow remote attackers to inj

23RIESGO

Exploit-DB

Nginx 1.3.9/1.4.0 (x86) - Brute Force

CVE-2013-2028—remotelinux_x8611 jul 2013

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau

60RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5631—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5621—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5632—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5625—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5624—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5630—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5622—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5627—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5628—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5633—webappshardware10 jul 2013

20RIESGO

Exploit-DB

Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities

CVE-2013-5623—webappshardware10 jul 2013

20RIESGO

Exploit-DB✓ VexDay Proof

Mintboard - Multiple Cross-Site Scripting Vulnerabilities

CVE-2013-4951—webappsphp10 jul 2013

Multiple cross-site scripting (XSS) vulnerabilities in Mintboard 0.3 allow remote attackers to inject arbitrary web scri

23RIESGO

Exploit-DB✓ VexDay Proof

ERS Viewer 2013 - '.ERS' File Handling Buffer Overflow (Metasploit)

CVE-2013-3482—localwindows09 jul 2013

Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.

50RIESGO

Exploit-DB✓ VexDay Proof

Zoom Telephonics (Multiple Devices) - Multiple Vulnerabilities

CVE-2013-5620—remotehardware09 jul 2013

20RIESGO

Exploit-DB

Solaris Recommended Patch Cluster 6/19 (x86) - Local Privilege Escalation

CVE-2010-1183—locallinux_x8609 jul 2013

Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink a

23RIESGO

Exploit-DB✓ VexDay Proof

Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service

CVE-2013-2160—dosmultiple09 jul 2013

The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote att

35RIESGO

Exploit-DB

Adobe Reader X 10.1.4.38 - '.BMP'/'.RLE' Heap Corruption

CVE-2013-2729HIGHbajo ataquelocalwindows08 jul 2013

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attack

83RIESGO

Exploit-DB

OpenX 2.8.10 - Multiple Vulnerabilities

CVE-2013-3515—webappsphp05 jul 2013

Multiple cross-site scripting (XSS) vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject

23RIESGO

Exploit-DB

Kasseler CMS 2 r1223 - Multiple Vulnerabilities

CVE-2013-3729—webappsphp05 jul 2013

Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hija

23RIESGO

Exploit-DB

OpenX 2.8.10 - Multiple Vulnerabilities

CVE-2013-7376—webappsphp05 jul 2013

Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote

23RIESGO

Exploit-DB

Kasseler CMS 2 r1223 - Multiple Vulnerabilities

CVE-2013-3727—webappsphp05 jul 2013

SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL co

23RIESGO

Exploit-DB

OpenX 2.8.10 - Multiple Vulnerabilities

CVE-2013-3514—webappsphp05 jul 2013

Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read a

23RIESGO

Exploit-DB

Kasseler CMS 2 r1223 - Multiple Vulnerabilities

CVE-2013-3728—webappsphp05 jul 2013

Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissio

23RIESGO

Exploit-DB✓ VexDay Proof

Google Android - 'APK' code Remote Security Bypass

CVE-2013-4787—remoteandroid03 jul 2013

Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allows

35RIESGO

Exploit-DB✓ VexDay Proof

Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)

CVE-2013-3660HIGHbajo ataquelocalwindows02 jul 2013

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo

98RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.