Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
CVE-2012-5452—webappsphp22 oct 2012
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
CVE-2012-5387—webappsphp22 oct 2012
Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordP
23RIESGO
abrir ↗
Exploit-DB
ATutor 1.2 - Multiple Vulnerabilities
CVE-2012-5453—webappsphp22 oct 2012
SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
CVE-2012-4772—webappsphp22 oct 2012
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
CVE-2012-4771—webappsphp22 oct 2012
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitra
23RIESGO
abrir ↗
Exploit-DB
Movable Type Pro 5.13en - Persistent Cross-Site Scripting
CVE-2012-1503—webappsphp22 oct 2012
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote a
23RIESGO
abrir ↗
Exploit-DB
ATutor 1.2 - Multiple Vulnerabilities
CVE-2012-5167—webappsphp22 oct 2012
Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
CVE-2012-5388—webappsphp22 oct 2012
Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
CVE-2012-4773—webappsphp22 oct 2012
Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebTitan - 'logs-x.php' Directory Traversal
CVE-2011-4640—webappsphp20 oct 2012
Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to r
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OTRS 3.1 - Persistent Cross-Site Scripting
CVE-2012-4751—webappswindows18 oct 2012
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befor
23RIESGO
abrir ↗
Exploit-DB
Oracle Database - Protocol Authentication Bypass
CVE-2012-3137—localmultiple18 oct 2012
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OTRS 3.1 - Persistent Cross-Site Scripting
CVE-2012-4600—webappswindows18 oct 2012
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befor
23RIESGO
abrir ↗
Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
CVE-2012-3185—webappsmultiple17 oct 2012
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ModSecurity - 'POST' Security Bypass
CVE-2012-4528—remotelinux17 oct 2012
The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver ar
28RIESGO
abrir ↗
Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
CVE-2012-3184—webappsmultiple17 oct 2012
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RIESGO
abrir ↗
Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
CVE-2012-3183—webappsmultiple17 oct 2012
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RIESGO
abrir ↗
Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
CVE-2012-3186—webappsmultiple17 oct 2012
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
jCore - '/admin/index.php?path' Cross-Site Scripting
CVE-2012-4231—webappsphp17 oct 2012
Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject ar
23RIESGO
abrir ↗
Exploit-DB
EZHomeTech EzServer 7.0 - Remote Heap Corruption
CVE-2012-4750—doswindows16 oct 2012
A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, wh
23RIESGO
abrir ↗
Exploit-DB
Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities
CVE-2012-3810—remotewindows16 oct 2012
Samsung Kies before 2.5.0.12094_27_11 has registry modification.
23RIESGO
abrir ↗
Exploit-DB
Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities
CVE-2012-3809—remotewindows16 oct 2012
Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.
23RIESGO
abrir ↗
Exploit-DB
Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities
CVE-2012-3807—remotewindows16 oct 2012
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
35RIESGO
abrir ↗
Exploit-DB
Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities
CVE-2012-3808—remotewindows16 oct 2012
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.
23RIESGO
abrir ↗
Exploit-DB
Huawei Technologies Internet Mobile - Unicode (SEH)
CVE-2012-6568—localwindows15 oct 2012
Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Excel - Denial of Service
CVE-2012-5672—doswindows11 oct 2012
Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cau
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
KeyHelp - ActiveX LaunchTriPane Remote Code Execution (Metasploit)
CVE-2012-2516—remotewindows11 oct 2012
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Pl
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 2.0.3 - '.png' ReadAV Crash (PoC)
CVE-2012-5470—doswindows11 oct 2012
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OpenX 2.8.10 - 'plugin-index.php' Cross-Site Scripting
CVE-2012-4989—webappsphp10 oct 2012
Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Avaya IP Office Customer Call Reporter - 'ImageUpload.ashx' Remote Command Execution (Metasploit)
CVE-2012-3811—remotewindows10 oct 2012
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call
50RIESGO
abrir ↗
← anteriorpágina 273 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.