Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.313exploits catalogados
34.834CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8484Nuclei 4237Metasploit 3467✓ solo verificadosrecientespopularesriesgo
8484 exploits
VulnCheck XDB
infoleak
CVE-2014-0160HIGHbajo ataque08 abr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHbajo ataque08 abr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHbajo ataque08 abr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗
VulnCheck XDB
infoleak
CVE-2014-0160HIGHbajo ataque07 abr 2014
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2012-3153—28 ene 2014
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and
60RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2013-6282HIGHbajo ataque21 dic 2013
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not
98RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2013-3893HIGHbajo ataque15 oct 2013
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throug
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2013-2595—03 oct 2013
The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm
23RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-22954CRITICALbajo ataqueransomware01 oct 2013
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa
100RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2013-1300—09 sep 2013
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W
43RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2013-2596HIGHbajo ataque16 jul 2013
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain
71RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2013-2597HIGHbajo ataque11 jun 2013
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6
71RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2013-2094HIGHbajo ataque05 jun 2013
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t
83RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2013-2094HIGHbajo ataque20 may 2013
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t
83RIESGO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2013-2729HIGHbajo ataque15 may 2013
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attack
83RIESGO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2013-0156—11 ene 2013
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an
60RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2012-0056—29 dic 2012
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when
28RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2018-8174HIGHbajo ataqueransomware01 ene 0001
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RIESGO
abrir ↗
VulnCheck XDB
client-side
CVE-2018-0802HIGHbajo ataque01 ene 0001
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow
93RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALbajo ataqueransomware01 ene 0001
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2022-20699CRITICALbajo ataque01 ene 0001
Cisco Small Business RV Series Routers Vulnerabilities
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2021-1732HIGHbajo ataqueransomware01 ene 0001
Windows Win32k Elevation of Privilege Vulnerability
100RIESGO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-11580CRITICALbajo ataqueransomware01 ene 0001
Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attac
100RIESGO
abrir ↗
VulnCheck XDB
local
CVE-2019-0211HIGHbajo ataque01 ene 0001
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege
83RIESGO
abrir ↗
← anteriorpágina 283 / 283

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.