Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.980exploits catalogados
36.899CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
FFmpeg libavformat - 'psxstr.c' STR Data Heap Buffer Overflow
Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PageFusion 1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Boonex Dolphin 6.1.2 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.7.1 - 'admincp/faq.php?Injection adminlog.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x ver
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fuzzylime (cms) 3.01 - 'blog.php' Local File Inclusion
Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 4ndvddb 0.91 Module - 'id' SQL Injection
SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zoph 0.7.2.1 - 'search.php?_off' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zoph 0.7.2.1 - SQL Injection
SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified ve
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DodosMail 2.5 - 'dodosmail.php' Local File Inclusion
Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell meta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Messenger 2.0 Client - Buffer Overflow
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileg
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 1.0.0 - Multiple Denial of Service Vulnerabilities
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (applic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FaName 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FaName 1.0 - 'page.php?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Directory Server 6.1.x - Adding 'ibm-globalAdminGroup' Entry Denial of Service
Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated admi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdTag' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdFlux' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - Authentication Bypass
RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AceFTP 3.80.3 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass
Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location propert
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location propert
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' SQL Injection
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UUSee 2008 - UUUpgrade ActiveX Control 'Update' Method Arbitrary File Download
Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle.php?id' SQL Injection
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNOME Rhythmbox 0.11.5 - '.Playlist' File Denial of Service
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlis
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.