Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
Open Constructor - 'confirm.php?q' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell SonicWALL Scrutinizer 9 - SQL Injection (Metasploit)
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Linksys PlayerPT - ActiveX Control SetSource sURL argument Buffer Overflow (Metasploit)
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.o
50RIESGO
abrir ↗Exploit-DB
FreeBSD - SCTP Remote NULL Ptr Dereference Denial of Service
The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference an
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Fixed Table Col Span Heap Overflow (MS12-037) (Metasploit)
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mahara 1.4.1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote att
23RIESGO
abrir ↗Exploit-DB
Nvidia Linux Driver - Local Privilege Escalation
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-no
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.4.3 - PDO Memory Access Violation Denial of Service
pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end o
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eGlibc - Signedness Code Execution
Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions
23RIESGO
abrir ↗Exploit-DB
ManageEngine Application Manager 10 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office SharePoint Server 2007 - Remote Code Execution (MS10-104) (Metasploit)
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Serve
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer 9.0.1.19899 - Arbitrary File Upload
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer 9.0.1.19899 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer 9.0.1.19899 - HTTP Authentication Bypass
cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not requir
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - 'deptUploads_data.php?groupid' Blind SQL Injection
SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow (ASLR + DEP Bypass)
Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2.18 - 'pbcontrol.php' Command Injection (Metasploit)
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary comman
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'rds_recvmsg()' Local Information Disclosure
The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure mem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ISC DHCP 4.x - Multiple Denial of Service Vulnerabilities
ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infinit
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - Local/Remote File Inclusion / Remote Command Execution
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - 'pbcontrol.php' Root Remote Code Execution
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary comman
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zabbix 2.0.1 - Session Extractor
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection
SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2 - 'blocked.php?id' Blind SQL Injection
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OS
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell SonicWALL Scrutinizer 9.0.1 - 'statusFilter.php?q' SQL Injection
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.