Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows Live Messenger Plus! Fileserver 1.0 - Directory Traversal
Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 7.0/7.1 - 'vfs.usermount' Local Privilege Escalation
Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JNM Guestbook 3.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TalkBack 2.3.14 - Multiple Vulnerabilities
addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ClearContent - '/image.php?url' Local/Remote File Inclusion
Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mlffat 2.2 - Blind SQL Injection
SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a m
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'AddFavorite' Remote Crash (PoC)
Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Siteframe CMS 3.2.x - SQL Injection / phpinfo()
Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct requ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Universe CMS 1.0.6 - 'vnews.php?id' SQL Injection
SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Guestbook Pro 5.1 - 'ogp_show.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
otsAV DJ 1.85.064 - '.ofl' Local Heap Overflow (PoC)
Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TalkBack 2.3.14 - Multiple Vulnerabilities
TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linea21 1.2.1 - 'search' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tausch Ticket Script 3 - 'suchauftraege_user.php?userid' SQL Injection
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Swinger Club Portal - 'start.php?go' Remote File Inclusion
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tausch Ticket Script 3 - 'vote.php?descr' SQL Injection
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rentventory - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Swinger Club Portal - 'start.php?id' SQL Injection
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP Multiple LaserJet Printer - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - 'albumID' SQL Injection
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sourcefire 3D Sensor & Defense Center 4.8.x - Privilege Escalation
The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authentica
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rentventory - Multiple SQL Injections
SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MP3-Nator 2.0 - '.plf' Universal Buffer Overflow (SEH)
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure
The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.