Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.980exploits catalogados
36.899CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
PHP 5.2.6 - 'chdir()' Function http URL Argument Safe_mode Restriction Bypass
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_m
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Screen 4.0.3 (OpenBSD) - Local Authentication Bypass
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption
Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UltraEdit 14.00b - FTP/SFTP 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenDocMan 1.x - 'out.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsConnectionNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/Applications/lifecycleModulesNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP serv
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcConnectionPoolNew1.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell iPrint Client - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows bef
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/customResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Crysis 1.21 - HTTP/XML-RPC Service Remote Denial of Service
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Skulltag 0.97 d2-RC3 - Malformed Packet Denial of Service
Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang) via a series of long,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsDestinationNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/externalResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
S.T.A.L.K.E.R. 1.0.06 - Remote Denial of Service
S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Crysis 1.21 - 'keyexchange' Packet Information Disclosure
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by send
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BASE 1.2.4 - 'base_qry_common.php' Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_gl
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo 4.6.4 - Cache Lite Output Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and e
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SHOUTcast Admin Panel 2.0 - 'page' Local File Inclusion
Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.6.10/3.7.1 - 'redirect' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebChamado 1.1 - 'tsk_id' SQL Injection
SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Glub Tech Secure FTP 2.5.15 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities
Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) ad
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - 'last_records.php?annuaire' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - 'annuaire.php?annuaire' SQL Injection
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - '/admin/login.php?Username' SQL Injection
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.