Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.390exploits catalogados
40.212CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.762VulnCheck XDB 9992Nuclei 4547Metasploit 3531✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB
X.Org xorg 1.4 < 1.11.2 - File Permission Change
CVE-2011-4029—locallinux28 oct 2011
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of arb
23RIESGO
abrir ↗
Exploit-DB
WordPress Plugin wptouch - SQL Injection
CVE-2011-4803—webappsphp27 oct 2011
SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute a
23RIESGO
abrir ↗
Exploit-DB
Online Subtitles Workshop - Cross-Site Scripting
CVE-2011-5185—webappsphp26 oct 2011
Cross-site scripting (XSS) vulnerability in video_comments.php in Online Subtitles Workshop before 2.0 rev 131 allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco - 'file' Directory Traversal
CVE-2011-3315—remotehardware26 oct 2011
Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x befor
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpScheduleIt 1.2.10 - 'reserve.php' Arbitrary Code Injection (Metasploit)
CVE-2008-6132—webappsphp26 oct 2011
Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (Metasploit) (2)
CVE-2011-4075—webappsphp25 oct 2011
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
e107 0.7.24 - 'cmd' Remote Command Execution
CVE-2011-1513—webappsphp24 oct 2011
Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installat
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1)
CVE-2011-4075—webappsphp23 oct 2011
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1)
CVE-2011-4074—webappsphp23 oct 2011
Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Win32k - Null Pointer De-reference (PoC) (MS11-077)
CVE-2011-1985HIGHdoswindows23 oct 2011
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W
41RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DELL Quest One Password Manager - CAPTCHA Security Bypass
CVE-2013-6246—remotemultiple21 oct 2011
The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sens
23RIESGO
abrir ↗
Exploit-DB
SportsPHool 1.0 - Remote File Inclusion
CVE-2006-4278—webappsphp21 oct 2011
PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers t
23RIESGO
abrir ↗
Exploit-DB
OCS Inventory NG 2.0.1 - Persistent Cross-Site Scripting
CVE-2011-4024—webappswindows20 oct 2011
Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pre Studio Business Cards Designer - SQL Injection
CVE-2011-5139—webappsasp20 oct 2011
SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP Power Manager - 'formExportDataLogs' Remote Buffer Overflow (Metasploit)
CVE-2009-3999—remotecgi20 oct 2011
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to ex
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)
CVE-2011-1425—remotewindows18 oct 2011
xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)
CVE-2011-1774—remotewindows18 oct 2011
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbi
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Toshiba e-Studio (Multiple Devices) - Security Bypass
CVE-2012-1239—remotemultiple17 oct 2011
The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmwa
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Safari - 'file://' Arbitrary Code Execution (Metasploit)
CVE-2011-3230—remoteosx17 oct 2011
Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers
50RIESGO
abrir ↗
Exploit-DB
GNUBoard 4.33.02 - 'tp.php?PATH_INFO' SQL Injection
CVE-2011-4066—webappsphp17 oct 2011
SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Exploit-DB
Microsoft Windows - TCP/IP Stack Denial of Service (MS11-064)
CVE-2011-1965—doswindows15 oct 2011
Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properl
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
vTiger CRM 5.2 - 'onlyforuser' SQL Injection
CVE-2011-4559—webappsphp15 oct 2011
SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (Metasploit) (2)
CVE-2011-2371—remotewindows13 oct 2011
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird bef
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer
CVE-2011-4519—doswindows13 oct 2011
Stack-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer
CVE-2011-4520—doswindows13 oct 2011
Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer
CVE-2011-4518—doswindows13 oct 2011
Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remo
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows - '.fon' Kernel-Mode Buffer Overrun (PoC) (MS11-077)
CVE-2011-2003—doswindows13 oct 2011
Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PcVue 10.0 SV.UIGrdCtrl.1 - 'LoadObject()'/'SaveObject()' Trusted DWORD (Metasploit)
CVE-2011-4044—remotewindows12 oct 2011
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (1)
CVE-2011-2371—remotewindows12 oct 2011
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird bef
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TugZip 3.5 Archiver - '.ZIP' File Parsing Buffer Overflow (Metasploit)
CVE-2008-4779—localwindows11 oct 2011
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary
50RIESGO
abrir ↗
← anteriorpágina 315 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.