Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
76.313exploits catalogados
34.834CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8484Nuclei 4237Metasploit 3467✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
acpid 1.0.x - Multiple Local Denial of Service Vulnerabilities
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but
23RIESGO
abrir ↗Exploit-DB
Simploo CMS 1.7.1 - PHP Code Execution
Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component allCineVid 1.0.0 - Blind SQL Injection
SQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB
N-13 News 3.4 - Cross-Site Request Forgery (Admin Add)
Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pango Font Parsing - 'pangoft2-render.c' Heap Corruption
Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pan
28RIESGO
abrir ↗Exploit-DB
CakePHP 1.3.5/1.2.8 - 'Unserialize()' File Inclusion
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re
50RIESGO
abrir ↗Exploit-DB
Linux Kernel 2.6.32 (Ubuntu 10.04) - '/proc' Handling SUID Privilege Escalation
The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc director
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion Teams Structure Infusion Addon - SQL Injection
SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to exec
23RIESGO
abrir ↗Exploit-DB
SmoothWall Express 3.0 - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothw
23RIESGO
abrir ↗Exploit-DB
SmoothWall Express 3.0 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Expre
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpCMS 2008 V2 - 'data.php' SQL Injection
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB
Kingsoft AntiVirus 2011 SP5.2 'KisKrnl.sys' 2011.1.13.89 - Local Kernel Mode Denial of Service
KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (c
23RIESGO
abrir ↗Exploit-DB
BetMore Site Suite 4 - 'bid' Blind SQL Injection
SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB
Seo Panel 2.2.0 - Cookie-Rendered Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AWBS 2.9.2 - 'cart.php' Blind SQL Injection
SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Objectivity/DB - Lack of Authentication
The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows rem
28RIESGO
abrir ↗Exploit-DB
Real Networks RealPlayer SP - 'RecordClip' Method Remote Code Execution
The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CakePHP 1.3.5/1.2.8 - Cache Corruption (Metasploit)
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft WMI Administration Tools - ActiveX Buffer Overflow (Metasploit)
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in
60RIESGO
abrir ↗Exploit-DB
Sielco Sistemi Winlog 2.07.00 - Stack Overflow
Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Blackmoon FTP 3.1 Build 1735/1736 - Denial of Service
FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.173
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Win32k - Keyboard Layout (MS10-073)
The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteScape Enterprise Forum 7 - TCL Injection
support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator charact
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Data Access Components - Remote Overflow (MS11-002)
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properl
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mono/Moonlight Generic Type Argument - Privilege Escalation
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft RPC DCOM Interface - Remote Overflow (MS03-026) (Metasploit)
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote
60RIESGO
abrir ↗Exploit-DB
vam shop 1.6 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote at
23RIESGO
abrir ↗Exploit-DB
Wireshark - ZigBee ZCL Dissector Infinite Loop Denial of Service
epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)
Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted r
23RIESGO
abrir ↗Exploit-DB
diafan.cms 4.3 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.