Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.980exploits catalogados
36.899CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1)
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
5th street - 'dx8render.dll' Format String
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Ste
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (2)
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'archive.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'cat.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'photos.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PEGames - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SunAge 1.8.1 - Multiple Denial of Service Vulnerabilities
Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
World in Conflict 1.008 - Null Pointer Remote Denial of Service
World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and cra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_edit_topmenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_new_submenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'comments.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Perl - 'rmtree()' Function Local Insecure Permissions
The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, whic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_edit_submenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'members.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HoMaP-CMS 0.1 - 'plugin_admin.php' Remote File Inclusion
PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteXS CMS 0.1.1 - Arbitrary File Upload / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NASM 2.0 - 'ppscan()' Off-by-One Buffer Overflow
Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Classic FTP 1.02 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP serve
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Diigo Toolbar and Diigolet Comment Feature - HTML Injection / Information Disclosure
Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WISE-FTP 4.1/5.5.8 - FTP Client 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to crea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure
SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not proper
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.