Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.980exploits catalogados
36.899CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
phpSQLiteCMS 1 RC2 - '/cms/includes/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BMForum 5.6 - 'bsd01footer.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpSQLiteCMS 1 RC2 - '/cms/includes/login.inc.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Barracuda Spam Firewall 3.5.11 - 'ldap_test.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AbleDating 2.4 - 'search_results.php?keyword' SQL Injection
SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vsftpd 2.0.5 - 'deny_file' Option Remote Denial of Service (1)
Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 throug
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
libxslt XSL 1.1.23 - File Processing Buffer Overflow
Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (c
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAP Web Application Server 7.0 - '/sap/bc/gui/sap/its/webgui/' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (ak
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 2.0.0.14 - JSframe Heap Corruption Denial of Service
Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Lotus Sametime 8.0 - Multiplexer Buffer Overflow
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vsftpd 2.0.5 - 'deny_file' Option Remote Denial of Service (2)
Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 throug
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Web Slider 0.6 - 'slide' SQL Injection
SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AppServ Open Project 2.5.10 - 'appservlang' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Starsgames Control Panel 4.6.2 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
bcoos 1.0.13 - 'file' Local File Inclusion
Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 11.21 - 'wwwact' Privilege Escalation
scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-AGTC Membership System 1.1a - Arbitrary Add Admin
adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FicHive 1.0 - 'category' Blind SQL Injection
SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ACGV News 0.9.1 - 'glossaire.php?id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AN Guestbook 0.4 - 'send_email.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in send_email.php in AN Guestbook (ANG) 0.4 allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Digital Hive 2.0 - 'base_include.php' Local File Inclusion
Directory traversal vulnerability in template/purpletech/base_include.php in DigitalHive (aka hive) 2.0 RC2 allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ACGV News 0.9.1 - 'glossaire.php?id' SQL Injection
SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 3.5.1 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
philboard 0.5 - 'W1L3D4_konuya_mesaj_yaz.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
philboard 0.5 - 'W1L3D4_konuoku.asp?id' SQL Injection
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
philboard 0.5 - 'W1L3D4_foruma_yeni_konu_ac.asp?forumid' SQL Injection
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPInstantGallery 2.0 - 'index.php?Gallery' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPInstantGallery 2.0 - 'image.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CyrixMED 1.4 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fusebox 5.5.1 - 'fusebox5.php' Remote File Inclusion
PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PH
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.