Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB
VideoLAN VLC Media Player 2.0.1 - '.mp4' Crash (PoC)
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicati
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung D6000 TV - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL - ASN1 BIO Memory Corruption
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung D6000 TV - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
28RIESGO
abrir ↗Exploit-DB
Microsoft Windows - 'afd.sys' Local Kernel (PoC) (MS11-046)
The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - 'call_dissector()' Null Pointer Dereference Denial of Service
epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows r
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - '/modules/pm/pmlite.php?to_userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CyberLink Power2Go - name Attribute (p2g) Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to e
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - '/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ownCloud 3.0.0 - 'index.php?redirect_url' Arbitrary Site Redirect
Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redire
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TeamPass 2.1.5 - 'login' HTML Injection
Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticat
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Acuity CMS 2.6.2 - 'Username' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IrfanView FlashPix PlugIn - Decompression Heap Overflow
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
V-CMS - Arbitrary '.PHP' File Upload / Execution (Metasploit)
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Munin 2.0~rc4-1 - Remote Command Injection
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quest InTrust - Annotation Objects Uninitialized Pointer (Metasploit)
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prope
50RIESGO
abrir ↗Exploit-DB
Invision Power Board 3.3.0 - Local File Inclusion
Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sen
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EMC IRM License Server 4.6.1.1995 - Denial of Service
The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EMC IRM License Server 4.6.1.1995 - Denial of Service
The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WICD 1.7.1 - Local Privilege Escalation
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configur
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'agenda-widget.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'box_publish_button.php?button_value' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'agenda-widget-form.php?title' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'save_successful.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Estate Agent - SQL Injection
SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to execu
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.