Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
Pilot Group eTraining - 'lessons_login.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LightOpenCMS 0.1 - 'smarty.php?cwd' Local File Inclusion
Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PG Matchmaking - 'browse_men.php?show' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPEcho CMS 2.0-rc3 - 'forum' Cross-Site Scripting Cookie Stealing / Blind SQL Injection
SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PG Matchmaking - 'browse_ladies.php?show' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PG Matchmaking - 'search.php?show' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tribiq CMS 5.0.12c - Cross-Site Scripting / Local File Inclusion
Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gp
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpCollegeExchange 0.1.5c - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zen Cart 1.3.8 - SQL Execution
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zen Cart 1.3.8 - Remote Code Execution
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which a
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpCollegeExchange 0.1.5c - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MIDAS 1.43 - (Authentication Bypass) Insecure Cookie Handling
MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kasseler CMS - File Disclosure / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kasseler CMS - File Disclosure / Cross-Site Scripting
Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary fil
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin - 'pmaPWN!' Code Injection / Remote Code Execution
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remo
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bopup Communications Server 3.2.26.5460 - Remote SYSTEM
Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrar
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AWScripts Gallery Search Engine 1.x - Insecure Cookie
The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.4.6 - Remote Code Execution
SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authen
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.0.11 and Thunderbird 2.0.9 - RDF File Handling Remote Memory Corruption
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Programs Rating - 'postcomments.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Programs Rating - 'rate.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Edraw PDF Viewer Component < 3.2.0.126 - ActiveX Insecure Method
Insecure method vulnerability in the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) in Edraw PDF Viewer Compo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DESlock+ 4.0.2 - 'dlpcrypt.sys' Local Kernel Ring0 Code Execution
The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x80
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.30 - 'tun_chr_pool()' Null Pointer Dereference
The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Compface 1.5.2 - '.xbm' Local Buffer Overflow (PoC)
Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities
Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netgear DG632 Router - Authentication Bypass
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmwar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
formmail 1.92 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
formmail 1.92 - Multiple Vulnerabilities
CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.