Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
PHP Volunteer management 1.0.2 - Multiple Vulnerabilities
CVE-2012-6505—webappsphp26 abr 2012
Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-6506—webappsphp26 abr 2012
Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote atta
23RIESGO
abrir ↗
Exploit-DB
piwigo 2.3.3 - Multiple Vulnerabilities
CVE-2012-2209—webappsphp25 abr 2012
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB
piwigo 2.3.3 - Multiple Vulnerabilities
CVE-2012-2208—webappsphp25 abr 2012
Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Shadow Stream Recorder 3.0.1.7 - Local Buffer Overflow (Metasploit)
CVE-2009-1642—localwindows25 abr 2012
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
mount.cifs - 'chdir()' Arbitrary Root File Identification
CVE-2012-1586—locallinux25 abr 2012
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the fil
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - MSCOMCTL ActiveX Buffer Overflow (MS12-027) (Metasploit)
CVE-2012-0158HIGHbajo ataqueransomwareremotewindows25 abr 2012
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Ticket System Beta 1 - 'index.php?p' SQL Injection
CVE-2012-6516—webappsphp24 abr 2012
SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Exploit-DB
RuggedCom Devices - Backdoor Access
CVE-2012-1803—remotehardware24 abr 2012
RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Ad
50RIESGO
abrir ↗
Exploit-DB
Microsoft .NET Framework EncoderParameter - Integer Overflow (MS12-025)
CVE-2012-0163—doswindows24 abr 2012
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameter
35RIESGO
abrir ↗
Exploit-DB
RuggedCom Devices - Backdoor Access
CVE-2012-2441—remotehardware24 abr 2012
RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address fi
23RIESGO
abrir ↗
Exploit-DB
Havalite CMS 1.0.4 - Multiple Vulnerabilities
CVE-2012-5919—webappsphp23 abr 2012
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component CCNewsLetter 1.0.7 - 'id' SQL Injection
CVE-2011-5099—webappsphp23 abr 2012
SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebCalendar 1.2.4 - Remote Code Execution
CVE-2012-1496—webappsphp23 abr 2012
Local file inclusion in WebCalendar before 1.2.5.
23RIESGO
abrir ↗
Exploit-DB
Havalite CMS 1.0.4 - Multiple Vulnerabilities
CVE-2012-5894—webappsphp23 abr 2012
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
CVE-2012-4333—doswindows22 abr 2012
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
CVE-2012-4335—doswindows22 abr 2012
Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative siz
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
CVE-2012-4329—doswindows22 abr 2012
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
CVE-2012-4330—doswindows22 abr 2012
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
CVE-2012-4334—doswindows22 abr 2012
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v
23RIESGO
abrir ↗
Exploit-DB
Oracle GlassFish Server - REST Cross-Site Request Forgery
CVE-2012-0550—webappswindows22 abr 2012
Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise
23RIESGO
abrir ↗
Exploit-DB
Oracle GlassFish Server 3.1.1 (build 12) - Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-0551—webappswindows22 abr 2012
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
vTiger CRM 5.1.0 - Local File Inclusion
CVE-2012-4867—webappsphp22 abr 2012
Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote at
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TFTP Server 1.4 - ST WRQ Buffer Overflow (Metasploit)
CVE-2008-1611—remotewindows20 abr 2012
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or ex
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Flash Player - ActionScript Launch Command Execution (Metasploit)
CVE-2008-5499—remotelinux20 abr 2012
Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-0984—webappsphp19 abr 2012
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Exploit-DB
VideoLAN VLC Media Player 2.0.1 - '.mp4' Crash (PoC)
CVE-2012-2396—doswindows19 abr 2012
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicati
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
CVE-2012-1260—webappsmultiple19 abr 2012
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samsung D6000 TV - Multiple Vulnerabilities
CVE-2012-4330—doshardware19 abr 2012
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
CVE-2012-1934—webappsphp19 abr 2012
SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attack
23RIESGO
abrir ↗
← anteriorpágina 289 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.