Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.388exploits catalogados
40.212CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.762VulnCheck XDB 9990Nuclei 4547Metasploit 3531✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
MailEnable Webmail - Cross-Site Scripting
CVE-2012-0389—webappsasp13 ene 2012
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Count Per Day - Multiple Vulnerabilities
CVE-2012-0895—webappsphp12 ene 2012
Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Advanced Image Hosting Script - SQL Injection
CVE-2012-6039—webappsphp12 ene 2012
SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GreenBrowser 6.0.1002 - Search Bar Short Cut Button Double-Free Remote Memory Corruption
CVE-2012-6041—remotewindows12 ene 2012
Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MailEnable 6.02 - 'ForgottonPassword.aspx' Cross-Site Scripting
CVE-2012-0389—webappsasp12 ene 2012
Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.39 < 3.2.2 (x86/x64) - 'Mempodipper' Local Privilege Escalation (2)
CVE-2012-0056—locallinux12 ene 2012
The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Count Per Day - Multiple Vulnerabilities
CVE-2012-0896—webappsphp12 ene 2012
Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remo
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
KnowledgeTree 3.x - Multiple Cross-Site Scripting Vulnerabilities
CVE-2012-0988—webappsphp11 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earl
23RIESGO
abrir ↗
Exploit-DB
Apache 2.2 - Scoreboard Invalid Free On Shutdown
CVE-2012-0031—doslinux11 ene 2012
scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon c
23RIESGO
abrir ↗
Exploit-DB
w-CMS 2.01 - Multiple Vulnerabilities
CVE-2012-6523—webappsphp10 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Age Verification 0.4 - 'redirect_to' Open Redirection
CVE-2012-6499—webappsphp10 ene 2012
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Age Verification 0.4 - Open Redirect
CVE-2012-6499—webappsphp10 ene 2012
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows
43RIESGO
abrir ↗
Exploit-DB
w-CMS 2.01 - Multiple Vulnerabilities
CVE-2012-6522—webappsphp10 ene 2012
Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Wireshark - Buffer Underflow / Denial of Service
CVE-2012-0067—doslinux10 ene 2012
wiretap/iptrace.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RazorCMS 1.2 - Directory Traversal
CVE-2012-5918—webappsphp10 ene 2012
razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow
CVE-2008-1611—remotewindows10 ene 2012
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or ex
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Netware - XNFS caller_name xdrDecodeString Remote Code Execution
CVE-2011-4191—dosnetware10 ene 2012
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attacker
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Fusion 7.2.4 - 'downloads.php' Cross-Site Scripting
CVE-2012-6043—webappsphp10 ene 2012
Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RazorCMS 1.2 - Directory Traversal
CVE-2012-6038—webappsphp10 ene 2012
admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directorie
23RIESGO
abrir ↗
Exploit-DB
Pragyan CMS 3.0 - Remote File Disclosure
CVE-2012-6500—webappsphp10 ene 2012
Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft AntiXSS 3/4.0 Library Sanitization Module - Security Bypass
CVE-2012-0007—remotewindows10 ene 2012
The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the de
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Advanced File Management 1.4 - 'users.php' Cross-Site Scripting
CVE-2012-6040—webappsphp09 ene 2012
Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Marinet CMS - 'galleryphoto.php?id' SQL Injection
CVE-2012-6529—webappsphp09 ene 2012
Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the i
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Marinet CMS - 'gallery.php?id' SQL Injection
CVE-2012-6529—webappsphp09 ene 2012
Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the i
23RIESGO
abrir ↗
Exploit-DB
Clipbucket 2.6 - Multiple Vulnerabilities
CVE-2012-6644—webappsphp09 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Exploit-DB
Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) - Remote File Disclosure
CVE-2012-1024—webappslinux09 ene 2012
Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Clipbucket 2.6 - 'search_result.php?query' Cross-Site Scripting
CVE-2012-6644—webappsphp09 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Clipbucket 2.6 - 'collections.php?cat' Cross-Site Scripting
CVE-2012-6644—webappsphp09 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SAPID 1.2.3 Stable - Remote File Inclusion
CVE-2012-5293—webappsphp09 ene 2012
Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Clipbucket 2.6 - 'groups.php?cat' Cross-Site Scripting
CVE-2012-6644—webappsphp09 ene 2012
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
← anteriorpágina 304 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.