Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
OpenOffice - OLE Importer DocumentSummaryInformation Stream Handling Overflow (Metasploit)
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
appRain CMF - Arbitrary '.PHP' File Upload (Metasploit)
Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - Multiple Dissector Denial of Service Vulnerabilities
Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a de
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - DIAMETER Dissector Denial of Service
epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Mod_Auth_OpenID - Session Stealing
mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - Multiple Dissector Denial of Service Vulnerabilities
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a den
23RIESGO
abrir ↗Exploit-DB
Jaow 2.4.5 - Blind SQL Injection
SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - Misaligned Memory Denial of Service
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - Multiple Dissector Denial of Service Vulnerabilities
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
pragmaMx 1.12.1 - 'modules.php' URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
pragmaMx 1.12.1 - '/includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php?img_url' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB
Symantec End Point Protection 11.x / Symantec Network Access Control 11.x - Local Code Execution (PoC)
Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pligg CMS 1.x - 'module.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Plogger Photo Gallery - SQL Injection
SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mosh - Remote Denial of Service
The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Client 4.91 SP4 - Local Privilege Escalation
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by open
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Real-DRAW PRO 5.2.4 - Import File Crash
MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted (
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP StorageWorks P4000 - Virtual SAN Appliance Command Execution (Metasploit)
hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vanilla FirstLastNames 1.3.2 Plugin - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vanilla Forums About Me Plugin - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yandex.Server 2010 9.0 - 'text' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Foxit Reader 3.0 - Open Execute Action Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to e
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP StorageWorks P4000 - Virtual SAN Appliance Command Execution (Metasploit)
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to exe
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP StorageWorks P4000 - Virtual SAN Appliance Command Execution (Metasploit)
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Weblogic Apache Connector - POST Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Active Collab 'chat module' < 2.3.8 - Remote PHP Code Injection (Metasploit)
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute
43RIESGO
abrir ↗Exploit-DB
FreeNAC 3.02 - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗Exploit-DB
FreeNAC 3.02 - SQL Injection / Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - Keyboard Layouts Pool Corruption (PoC) (MS12-034)
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.