Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.006exploits catalogados

34.638CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.741VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

24.443 exploits

Exploit-DB✓ VexDay Proof

WordPress Plugin Share and Follow 1.80.3 - 'admin.php' Cross-Site Scripting

CVE-2012-2917—webappsphp15 may 2012

Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to

23RIESGO

Exploit-DB✓ VexDay Proof

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

CVE-2012-3792—doswindows14 may 2012

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re

28RIESGO

Exploit-DB✓ VexDay Proof

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

CVE-2012-3796—doswindows14 may 2012

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re

28RIESGO

Exploit-DB✓ VexDay Proof

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

CVE-2012-3795—doswindows14 may 2012

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re

28RIESGO

Exploit-DB✓ VexDay Proof

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

CVE-2012-3793—doswindows14 may 2012

Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 an

28RIESGO

Exploit-DB✓ VexDay Proof

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

CVE-2012-3797—doswindows14 may 2012

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not

28RIESGO

Exploit-DB✓ VexDay Proof

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

CVE-2012-3794—doswindows14 may 2012

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re

28RIESGO

Exploit-DB✓ VexDay Proof

Mozilla Firefox 8/9 - 'AttributeChildRemoved()' Use-After-Free (Metasploit)

CVE-2011-3659—remotewindows13 may 2012

Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 thr

50RIESGO

Exploit-DB✓ VexDay Proof

WordPress Plugin WP-FaceThumb 0.1 - 'pagination_wp_facethum' Cross-Site Scripting

CVE-2012-2371—webappsphp13 may 2012

Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attacke

43RIESGO

Exploit-DB

Proman Xpress 5.0.1 - Multiple Vulnerabilities

CVE-2012-4265—webappsphp13 may 2012

SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL

23RIESGO

Exploit-DB✓ VexDay Proof

Free Realty 3.1-0.6 - Multiple Vulnerabilities

CVE-2012-4279—webappsphp13 may 2012

Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute arbitrary SQL commands v

23RIESGO

Exploit-DB✓ VexDay Proof

Free Realty 3.1-0.6 - Multiple Vulnerabilities

CVE-2012-4278—webappsphp13 may 2012

Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary we

23RIESGO

Exploit-DB✓ VexDay Proof

Free Realty 3.1-0.6 - Multiple Vulnerabilities

CVE-2012-4280—webappsphp13 may 2012

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote

23RIESGO

Exploit-DB✓ VexDay Proof

RealVNC 4.1.0/4.1.1 - Authentication Bypass

CVE-2006-2369—remotewindows13 may 2012

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers t

60RIESGO

Exploit-DB

Viscacha Forum CMS 0.8.1.1 - Multiple Vulnerabilities

CVE-2012-2909—webappsphp13 may 2012

Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web s

23RIESGO

Exploit-DB

Viscacha Forum CMS 0.8.1.1 - Multiple Vulnerabilities

CVE-2012-2908—webappsphp13 may 2012

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitr

23RIESGO

Exploit-DB✓ VexDay Proof

Galette - 'picture.php' SQL Injection

CVE-2012-2338—webappsphp13 may 2012

SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows re

23RIESGO

Exploit-DB✓ VexDay Proof

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities

CVE-2012-2939—webappsphp13 may 2012

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute

23RIESGO

Exploit-DB

Proman Xpress 5.0.1 - Multiple Vulnerabilities

CVE-2012-4266—webappsphp13 may 2012

Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject

23RIESGO

Exploit-DB✓ VexDay Proof

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities

CVE-2012-2938—webappsphp13 may 2012

Multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary

23RIESGO

Exploit-DB✓ VexDay Proof

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities

CVE-2012-4281—webappsphp13 may 2012

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL command

23RIESGO

Exploit-DB✓ VexDay Proof

WikkaWiki 1.3.2 - Spam Logging PHP Injection (Metasploit)

CVE-2011-4449—webappsphp12 may 2012

actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file exte

23RIESGO

Exploit-DB✓ VexDay Proof

Sockso 1.51 - Persistent Cross-Site Scripting

CVE-2012-4267—webappsphp12 may 2012

Cross-site scripting (XSS) vulnerability in user/register in Sockso 1.5 and earlier allows remote attackers to inject ar

23RIESGO

Exploit-DB✓ VexDay Proof

PHP 5.4.3 (Windows x86 Polish) - Code Execution

CVE-2012-2376—localwindows_x8611 may 2012

Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execut

28RIESGO

Exploit-DB✓ VexDay Proof

Adobe Photoshop CS5.1 - U3D.8BI Collada Asset Elements Stack Overflow

CVE-2012-2052—localwindows11 may 2012

Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x bef

28RIESGO

Exploit-DB✓ VexDay Proof

Chevereto 1.91 - '/Upload/engine.php?v' Traversal Arbitrary File Enumeration

CVE-2012-2919—webappsphp10 may 2012

Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the exist

23RIESGO

Exploit-DB

eLearning server 4g - Multiple Vulnerabilities

CVE-2012-2923—webappsphp10 may 2012

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary

23RIESGO

Exploit-DB

eLearning server 4g - Multiple Vulnerabilities

CVE-2012-2924—webappsphp10 may 2012

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attacker

23RIESGO

Exploit-DB✓ VexDay Proof

Chevereto 1.91 - '/Upload/engine.php?v' Cross-Site Scripting

CVE-2012-2918—webappsphp10 may 2012

Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitr

23RIESGO

Exploit-DB✓ VexDay Proof

SAP NetWeaver Dispatcher - Multiple Vulnerabilities

CVE-2012-2513—doswindows09 may 2012

The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.