Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB
Template CMS 2.1.1 - Multiple Vulnerabilities
CVE-2012-4902—webappsphp04 oct 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to h
23RIESGO
abrir ↗
Exploit-DB
Novell Sentinel Log Manager 1.2.0.2 - Retention Policy
CVE-2012-6534—webappswindows04 oct 2012
Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/
23RIESGO
abrir ↗
Exploit-DB
XnView 1.99.1 - '.JLS' File Decompression Heap Overflow
CVE-2012-4988—doswindows04 oct 2012
Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JPEGsnoop 1.5.2 - WriteAV Crash (PoC)
CVE-2012-6307—doswindows04 oct 2012
A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious
23RIESGO
abrir ↗
Exploit-DB
Template CMS 2.1.1 - Multiple Vulnerabilities
CVE-2012-4901—webappsphp04 oct 2012
Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PowerTCP WebServer for - ActiveX Denial of Service
CVE-2012-3819—doswindows28 sep 2012
Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and
23RIESGO
abrir ↗
Exploit-DB
JAMF Casper Suite MDM - Cross-Site Request Forgery
CVE-2012-4051—webappsjsp27 sep 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interfa
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Trend Micro Control Manager 5.5/6.0 AdHocQuery - (Authenticated) Blind SQL Injection
CVE-2012-2998—webappswindows27 sep 2012
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 b
23RIESGO
abrir ↗
Exploit-DB
Cisco DPC2100 - Denial of Service
CVE-2011-1613—doshardware26 sep 2012
Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, a
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin MF Gig Calendar - Cross-Site Scripting
CVE-2012-4242—webappsphp20 sep 2012
Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to in
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CoSoSys Endpoint Protector - Predictable Password Generation
CVE-2012-2994—remotehardware17 sep 2012
The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number
23RIESGO
abrir ↗
Exploit-DB
Netsweeper WebAdmin Portal - Multiple Vulnerabilities
CVE-2012-3859—webappsphp17 sep 2012
Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulner
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise 8.0.2 HP3 and 2012 - Integer Overflow
CVE-2012-0271—doswindows17 sep 2012
Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 befo
28RIESGO
abrir ↗
Exploit-DB
Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting / Cross-Site Request Forgery
CVE-2012-2995—webappsaix14 sep 2012
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_13
23RIESGO
abrir ↗
Exploit-DB
Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting / Cross-Site Request Forgery
CVE-2012-2996—webappsaix14 sep 2012
Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Su
23RIESGO
abrir ↗
Exploit-DB
Ezylog Photovoltaic Management Server - Multiple Vulnerabilities
CVE-2012-5863—webappsphp12 sep 2012
Sinapsi eSolar OS Command Injection
53RIESGO
abrir ↗
Exploit-DB
Subrion CMS 2.2.1 - Cross-Site Request Forgery (Add Admin)
CVE-2012-4773—webappsphp12 sep 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Chrome for Android - Same-origin Policy Bypass Local Symlink
CVE-2012-4908—remoteandroid12 sep 2012
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access
23RIESGO
abrir ↗
Exploit-DB
Ezylog Photovoltaic Management Server - Multiple Vulnerabilities
CVE-2012-5864—webappsphp12 sep 2012
Sinapsi eSolar Improper Authentication
48RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Chrome for Android - com.android.browser.application_id Intent Extra Data Cross-Site Scripting
CVE-2012-4905—remoteandroid12 sep 2012
Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Winamp - MAKI Buffer Overflow (Metasploit)
CVE-2009-1831—localwindows12 sep 2012
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute
50RIESGO
abrir ↗
Exploit-DB
Ezylog Photovoltaic Management Server - Multiple Vulnerabilities
CVE-2012-5862—webappsphp12 sep 2012
Sinapsi eSolar Hard-Coded Password
53RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Chrome for Android - Local Application Handling Cookie Theft
CVE-2012-4909—remoteandroid12 sep 2012
Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted applicat
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Google Chrome for Android - Multiple 'file::' URL Handler Local Downloaded Content Disclosure Vulnerabilities
CVE-2012-4906—remoteandroid12 sep 2012
Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attack
23RIESGO
abrir ↗
Exploit-DB
Ezylog Photovoltaic Management Server - Multiple Vulnerabilities
CVE-2012-5861—webappsphp12 sep 2012
Sinapsi eSolar SQL Injection
41RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
libguac - Remote Buffer Overflow
CVE-2012-4415—remotelinux11 sep 2012
Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote a
28RIESGO
abrir ↗
Exploit-DB
Joomla! Component RokModule 1.1 - 'module' Blind SQL Injection
CVE-2010-1480—webappsphp10 sep 2012
SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DELTAScripts PHP Links - Multiple SQL Injections
CVE-2008-0565—webappsphp10 sep 2012
SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DELTAScripts PHP Links - Multiple SQL Injections
CVE-2008-6720—webappsphp10 sep 2012
SQL injection vulnerability in admin/adm_login.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB
Oracle VM VirtualBox 4.1 - Local Denial of Service
CVE-2012-3221—doslinux_x86-6410 sep 2012
Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local
23RIESGO
abrir ↗
← anteriorpágina 273 / 815siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.