Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.980exploits catalogados
36.899CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8959Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
RobotStats 0.1 - 'robotstats.inc.php?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Web Server Creator 0.1 - 'langfile' Remote File Inclusion
PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RobotStats 0.1 - 'graph.php?DOCUMENT_ROOT' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCO UnixWare < 7.1.4 p534589 - 'pkgadd' Local Privilege Escalation
Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privilege
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Glossaire 2.0 - 'glossaire.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SmarterTools SmarterMail 5.0 - HTTP Request Handling Denial of Service
Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to ca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KwsPHP 1.0 ConcoursPhoto Module - 'VIEW' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nuke ET 3.4 - 'mensaje' HTML Injection
Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Expl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 10 - rpc.ypupdated Remote Code Execution (Metasploit)
The SunView (SunTools) selection_svc facility allows remote users to read files.
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'stats.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 9.26 - Multiple Vulnerabilities
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection
SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'show.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'sess.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'resize.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Parallels Virtuozzo Containers 3.0.0-25.4/4.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 36
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'index.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mcGallery 1.1 - 'admin.php?lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)
Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DivXDB 2002 0.94b - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasySite 2.0 - 'browser.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasySite 2.0 - 'image_editor.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LANDesk Management Suite 8.80.1.1 - PXE TFTP Service Directory Traversal
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Terracotta - 'index.php' Local File Inclusion
Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka Op
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
@lex Guestbook 4.0.5 - 'index.php?test' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SLmail Pro 6.3.1.0 - Multiple Remote Denial of Service / Memory Corruption Vulnerabilities
WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
@lex Poll 1.2 - 'setup.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.