Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - Arbitrary Password Change (Metasploit)
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwor
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities
The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities
The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities
The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispa
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities
The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities
The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver
23RIESGO
abrir ↗Exploit-DB
uebimiau webmail 2.7.2 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB
IOServer 1.0.18.0 - Directory Traversal
Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 11.3 - Font Parsing Code Execution (Metasploit)
Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on L
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime plugin - Windows 4.1.2 (Japanese) Remote Overflow
Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
T-dah Webmail Client - Multiple Persistent Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Time Element Memory Corruption (MS11-050)
The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 do
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Asset Management - Remote Execution (Metasploit)
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote at
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Total Shop UK eCommerce CodeIgniter - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in the refresh_page function in application/modules/_main/views/_top.php in Tot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU glibc - Multiple Local Stack Buffer Overflow Vulnerabilities
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related func
23RIESGO
abrir ↗Exploit-DB
Viscosity - Local Privilege Escalation
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the se
50RIESGO
abrir ↗Exploit-DB
IBM Websphere MQ File Transfer Edition Web Gateway - Insufficient Access Control
The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere MQ File Transfer Edition Web Gateway - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (2)
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
23RIESGO
abrir ↗Exploit-DB
Solaris 10 Patch 137097-01 - Symlink Privilege Escalation
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (1)
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (2)
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname o
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetDecision 4.2 - TFTP Writable Directory Traversal Execution (Metasploit)
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Proventia Network Mail Security System 2.5 - POST File Read
Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Proventia Network Mail Security System 2.5 - POST File Read
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
xeams email server 4.4 build 5720 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mailenable enterprise 6.5 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OTRS Open Technology Real Services 3.1.4 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13,
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.