Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
Novell File Reporter (NFR) Agent FSFUI Record - Arbitrary File Upload / Remote Code Execution (Metasploit)
CVE-2012-4959—remotewindows19 nov 2012
Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and ex
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle Database Client System Analyzer - Arbitrary File Upload (Metasploit)
CVE-2010-3600—remotewindows15 nov 2012
Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and En
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BabyGekko 1.2.2e - Multiple Vulnerabilities
CVE-2012-5698—webappsphp15 nov 2012
BabyGekko before 1.2.4 has SQL injection.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell NetIQ Privileged User Manager 2.3.1 - 'auth.dll' pa_modify_accounts() Remote Code Execution
CVE-2012-5931—remotewindows15 nov 2012
Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User M
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell NetIQ Privileged User Manager 2.3.1 - 'auth.dll' pa_modify_accounts() Remote Code Execution
CVE-2012-5930—remotewindows15 nov 2012
The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does n
23RIESGO
abrir ↗
Exploit-DB
Broadcom BCM4325 / BCM4329 Devices - Denial of Service
CVE-2012-2619—doshardware15 nov 2012
The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Moto
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BabyGekko 1.2.2e - Multiple Vulnerabilities
CVE-2012-5699—webappsphp15 nov 2012
BabyGekko before 1.2.4 allows PHP file inclusion.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BabyGekko 1.2.2e - Multiple Vulnerabilities
CVE-2012-5700—webappsphp15 nov 2012
Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MYREphp Vacation Rental Software - Multiple Vulnerabilities
CVE-2012-6586—webappsphp14 nov 2012
Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MYREphp Vacation Rental Software - Multiple Vulnerabilities
CVE-2012-6587—webappsphp14 nov 2012
Cross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation Rental Software allows
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MYRE Realty Manager - Multiple Vulnerabilities
CVE-2012-6584—webappsphp14 nov 2012
Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MYRE Realty Manager - Multiple Vulnerabilities
CVE-2012-6585—webappsphp14 nov 2012
Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Myrephp Business Directory - Multiple Vulnerabilities
CVE-2012-6588—webappsphp14 nov 2012
SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Myrephp Business Directory - Multiple Vulnerabilities
CVE-2012-6589—webappsphp14 nov 2012
Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
dotProject 2.1.6 - Remote File Inclusion
CVE-2006-0755MEDIUMwebappsphp14 nov 2012
Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, allo
33RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Java Applet - JAX-WS Remote Code Execution (Metasploit)
CVE-2012-5067—remotemultiple13 nov 2012
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Java Applet - JAX-WS Remote Code Execution (Metasploit)
CVE-2012-5076CRITICALbajo ataqueremotemultiple13 nov 2012
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IrfanView - '.TIF' Image Decompression Buffer Overflow
CVE-2009-5022—doswindows13 nov 2012
Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execut
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Huawei (Multiple Products) - Password Encryption
CVE-2012-4960—remotehardware13 nov 2012
The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Invision Power Board (IP.Board) 3.3.4 - 'Unserialize()' PHP Code Execution (Metasploit)
CVE-2012-5692—remotephp13 nov 2012
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ESRI ArcGIS for Server - 'where' SQL Injection
CVE-2012-4949—webappsmultiple09 nov 2012
SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AR Web Content Manager (AWCM) - 'cookie_gen.php' Arbitrary Cookie Generation
CVE-2012-2437—webappsphp08 nov 2012
cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to ge
23RIESGO
abrir ↗
Exploit-DB
Invision Power Board (IP.Board) 3.3.4 - Unserialize Regex Bypass
CVE-2012-5692—webappsphp07 nov 2012
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OrangeHRM - 'sortField' SQL Injection
CVE-2012-5367—webappsphp07 nov 2012
Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cryptocat 2.0.22 - Arbitrary Script Injection
CVE-2013-4103—remotemultiple07 nov 2012
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
EMC NetWorker - Format String (Metasploit)
CVE-2012-2288—remotewindows07 nov 2012
Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cryptocat 2.0.21 Chrome Extension - 'img/keygen.gif' File Information Disclosure
CVE-2013-2261—remotemultiple07 nov 2012
Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
VeriCentre - Multiple SQL Injections
CVE-2012-4951—webappsphp06 nov 2012
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
CVE-2012-5686—webappsmultiple05 nov 2012
ZPanel 10.0.1 has insufficient entropy for its password reset process.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
CVE-2012-5684—webappsmultiple05 nov 2012
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
← anteriorpágina 270 / 815siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.