Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.388exploits catalogados
40.212CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.762VulnCheck XDB 9990Nuclei 4547Metasploit 3531✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
CoDeSys 3.4 - POST Null Pointer Content-Length Parsing Remote Denial of Service
CVE-2011-5009—dosmultiple30 nov 2011
The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a deni
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GOM Player 2.1.33.5071 - '.asx' File Unicode Stack Buffer Overflow
CVE-2011-5162—localwindows30 nov 2011
Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CCMPlayer 1.5 - '.m3u' Stack Buffer Overflow (SEH) (Metasploit)
CVE-2011-5170—localwindows30 nov 2011
Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code vi
50RIESGO
abrir ↗
Exploit-DB
Bugbear FlatOut 2005 - '.bed' File Buffer Overflow
CVE-2011-5173—doswindows30 nov 2011
Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OrangeHRM 2.6.11 - 'lib/controllers/CentralController.php' URI Cross-Site Scripting
CVE-2011-5258—webappsphp30 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.6.11.2 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GOM Player 2.1.33.5071 - '.asx' File Unicode Stack Buffer Overflow
CVE-2007-0707—localwindows30 nov 2011
Stack-based buffer overflow in GOM Player 2.0.12.3375 allows user-assisted remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OrangeHRM 2.6.11 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2011-5258—webappsphp30 nov 2011
Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.6.11.2 allow remote attackers to inject arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
OrangeHRM 2.6.11 - '/lib/controllers/CentralController.php?id' SQL Injection
CVE-2011-5259—webappsphp30 nov 2011
SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2 allows remote attacker
23RIESGO
abrir ↗
Exploit-DB
WikkaWiki 1.3.2 - Multiple Vulnerabilities
CVE-2011-4450—webappsphp30 nov 2011
Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Lotus Domino Server Controller - Authentication Bypass
CVE-2011-0920—remotejsp30 nov 2011
The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used,
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
CTEK SkyRouter 4200/4300 - Command Execution (Metasploit)
CVE-2011-5010—remotehardware30 nov 2011
apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via sh
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2003 - 'afd.sys' Local Privilege Escalation (MS11-080)
CVE-2011-2005HIGHbajo ataquelocalwindows30 nov 2011
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly valid
98RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
SugarCRM Community Edition 6.3.0RC1 - 'index.php' Multiple SQL Injections
CVE-2011-4833—webappsphp30 nov 2011
Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.
23RIESGO
abrir ↗
Exploit-DB
WikkaWiki 1.3.2 - Multiple Vulnerabilities
CVE-2011-4452—webappsphp30 nov 2011
Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote a
23RIESGO
abrir ↗
Exploit-DB
WikkaWiki 1.3.2 - Multiple Vulnerabilities
CVE-2011-4448—webappsphp30 nov 2011
SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attacker
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Lotus Domino Server Controller - Authentication Bypass
CVE-2011-1519—remotejsp30 nov 2011
The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located
23RIESGO
abrir ↗
Exploit-DB
WikkaWiki 1.3.2 - Multiple Vulnerabilities
CVE-2011-4449—webappsphp30 nov 2011
actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file exte
23RIESGO
abrir ↗
Exploit-DB
WikkaWiki 1.3.2 - Multiple Vulnerabilities
CVE-2011-4451—webappsphp30 nov 2011
libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to w
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Virtual Vertex Muster 6.1.6 - Web Interface Directory Traversal
CVE-2011-4714—webappsasp29 nov 2011
Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files v
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oxide WebServer - Directory Traversal
CVE-2011-4712—remotewindows29 nov 2011
Directory traversal vulnerability in Oxide WebServer allows remote attackers to read arbitrary files via a ..\ (dot dot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4532—doswindows28 nov 2011
Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical use
23RIESGO
abrir ↗
Exploit-DB
Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities
CVE-2010-4804—webappsandroid28 nov 2011
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// UR
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4877—doswindows28 nov 2011
HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4529—doswindows28 nov 2011
Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting
CVE-2011-5179—webappsphp28 nov 2011
Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly befor
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4530—doswindows28 nov 2011
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4876—doswindows28 nov 2011
Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008;
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities
CVE-2011-4531—doswindows28 nov 2011
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4879—doswindows28 nov 2011
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA po
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities
CVE-2011-4878—doswindows28 nov 2011
Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2
28RIESGO
abrir ↗
← anteriorpágina 310 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.