Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.388exploits catalogados
40.212CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.762VulnCheck XDB 9990Nuclei 4547Metasploit 3531✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - GDI+ (PoC) (MS08-052) (2)
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold an
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CUPS 1.3.7 - 'HP-GL/2' Filter Remote Code Execution
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary co
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GForge 4.5.19 - Multiple SQL Injections
SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset pa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HispaH textlinksads - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 8.51 - URI redirection Remote Code Execution
Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Konqueror 3.5.9 - 'color'/'bgcolor' Multiple Remote Crash Vulnerabilities
The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a fo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yerba SACphp 6.3 - Multiple Vulnerabilities
Directory traversal vulnerability in index.php in SAC.php (SACphp), as used in Yerba 6.3 and earlier, allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.0.3 - Internet Shortcut Same Origin Policy Violation
Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MPlayer - '.AAC' File Handling Denial of Service
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demons
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MPlayer - '.OGM' File Handling Denial of Service
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demons
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Konqueror 3.5.9 - 'font color' Remote Crash
The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Web Explorer 0.99b - 'edit.php?File' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Web Explorer 0.99b - 'main.php?refer' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Internet Download Manager 4.0.5 - File Parsing Buffer Overflow
Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VeriSign Kontiki Delivery Management System 5.0 - 'action' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Website Directory - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AmpJuke 0.7.5 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel (Fedora 8/9) - 'utrace_control' Null Pointer Dereference Denial of Service
A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dreamcost HostAdmin 3.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - GDI (EMR_COLORMATCHTOTARGETW) (MS08-021)
Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server
53RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
libxml2 - Denial of Service
libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dep
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 9/10 - SWF Version Null Pointer Dereference Denial of Service
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web serv
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Celoxis - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpScheduleIt 1.2.10 - 'reserve.php' Remote Code Execution
Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WikyBlog 1.7.1 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
H-Sphere WebShell 4.3.10 - 'actions.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
A4Desk Event Calendar - 'eventid' SQL Injection
SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ADN Forum 1.0b - Blind SQL Injection
Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpScheduleIt 1.2.10 - 'reserve.php' Remote Code Execution
Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo
43RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.