Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.980exploits catalogados
36.899CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Cisco WebEx Meeting Manager UCF - 'atucfobj.dll' ActiveX Remote Buffer Overflow
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'album.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'scrapbook.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS search.php?key' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxthon Browser 1.x - Content-Type Buffer Overflow
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a l
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'tribes.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'seutubo.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RMSOFT MiniShop 1.0 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'index.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'friends.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS down.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Qbik WinGate 6.2.2 - 'LIST' Remote Denial of Service
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenVms 8.3 Finger Service - Stack Buffer Overflow
Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice - 'search.asp?Filename' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Battle.net Clan Script 1.5.x - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Kleinanzeigen Module - 'lid' SQL Injection
SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions
Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disab
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKF-Portal 1.10 - 'baslik.php?tema_dizin' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice - 'order.asp?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service
The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (da
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKF-Portal 1.10 - 'anket_yonetim.php?portal_ayarlarportal_dili' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'suggest_image.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'adminhome.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
POWERGAP ShopSystem - 's03.php' SQL Injection
SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'browsecats.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
8E6 Technologies R3000 - Host Header Internet Filter Security Bypass
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host heade
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'cleanup.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Crafty Syntax Live Help 2.14.6 - 'livehelp_js.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote attac
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.