Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
ActiveWeb Professional 3.0 - Arbitrary File Upload
CVE-2011-0678—webappscfm25 ene 2011
Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Automated Solutions Modbus/TCP OPC Server - Remote Heap Corruption (PoC)
CVE-2010-4709—doswindows25 ene 2011
Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to c
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PivotX 2.2.2 - 'module_image.php' Cross-Site Scripting
CVE-2011-0773—webappsphp25 ene 2011
Cross-site scripting (XSS) vulnerability in pivotx/modules/module_image.php in PivotX before 2.2.3 allows remote attacke
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft SQL Server - sp_replwritetovarbin Memory Corruption (MS09-004) (Metasploit)
CVE-2008-5416—remotewindows24 ene 2011
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin RSS Feed Reader 0.1 - 'rss_url' Cross-Site Scripting
CVE-2011-0740—webappsphp23 ene 2011
Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in RSS Feed Reader 0.1 for WordPress allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Golden FTP Server 4.70 - 'PASS' Buffer Overflow
CVE-2006-6576—remotewindows23 ene 2011
Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (
50RIESGO
abrir ↗
Exploit-DB
PHP Link Directory 4.1.0 - Cross-Site Request Forgery (Add Admin)
CVE-2011-0643—webappsphp23 ene 2011
Cross-site request forgery (CSRF) vulnerability in admin/conf_users_edit.php in PHP Link Directory (phpLD) 4.1.0 allows
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun Java Web Start BasicServiceImpl - Remote Code Execution (Metasploit)
CVE-2010-3563—remotemultiple22 ene 2011
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows Server - Service Relative Path Stack Corruption (MS08-067) (Metasploit)
CVE-2008-4250CRITICALbajo ataqueremotewindows21 ene 2011
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RIESGO
abrir ↗
Exploit-DB
Look n stop - Local Denial of Service
CVE-2011-0652—doswindows21 ene 2011
lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (cras
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpCMS 2008 - SQL Injection
CVE-2011-0644—webappsphp20 ene 2011
SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Lowbids - 'viewfaqs.php' Blind SQL Injection
CVE-2011-0646—webappsphp20 ene 2011
SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CSS SetUserClip Memory Corruption (MS10-090) (Metasploit)
CVE-2010-3962HIGHbajo ataqueremotewindows20 ene 2011
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary cod
100RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpCMS 2008 - SQL Injection
CVE-2011-0645—webappsphp20 ene 2011
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB
Simploo CMS 1.7.1 - PHP Code Execution
CVE-2011-0635—webappsphp19 ene 2011
Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitra
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
acpid 1.0.x - Multiple Local Denial of Service Vulnerabilities
CVE-2011-1159—doslinux19 ene 2011
acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell iPrint 5.52 - ActiveX 'GetDriverSettings()' Command Execution
CVE-2010-4321—remotewindows19 ene 2011
Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to
50RIESGO
abrir ↗
Exploit-DB
CakePHP 1.3.5/1.2.8 - 'Unserialize()' File Inclusion
CVE-2010-4335—webappsphp18 ene 2011
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component allCineVid 1.0.0 - Blind SQL Injection
CVE-2011-0511—webappsphp18 ene 2011
SQL injection vulnerability in the allCineVid component (com_allcinevid) 1.0.0 for Joomla! allows remote attackers to ex
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pango Font Parsing - 'pangoft2-render.c' Heap Corruption
CVE-2011-0020—remotelinux18 ene 2011
Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pan
28RIESGO
abrir ↗
Exploit-DB
N-13 News 3.4 - Cross-Site Request Forgery (Admin Add)
CVE-2011-0642—webappsphp18 ene 2011
Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP-Fusion Teams Structure Infusion Addon - SQL Injection
CVE-2011-0512—webappsphp17 ene 2011
SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to exec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpCMS 2008 V2 - 'data.php' SQL Injection
CVE-2011-0645—webappsphp17 ene 2011
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB
SmoothWall Express 3.0 - Multiple Vulnerabilities
CVE-2011-5283—webappscgi17 ene 2011
Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Expre
23RIESGO
abrir ↗
Exploit-DB
SmoothWall Express 3.0 - Multiple Vulnerabilities
CVE-2011-5284—webappscgi17 ene 2011
Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothw
23RIESGO
abrir ↗
Exploit-DB
Linux Kernel 2.6.32 (Ubuntu 10.04) - '/proc' Handling SUID Privilege Escalation
CVE-2011-1020—locallinux17 ene 2011
The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc director
23RIESGO
abrir ↗
Exploit-DB
Kingsoft AntiVirus 2011 SP5.2 'KisKrnl.sys' 2011.1.13.89 - Local Kernel Mode Denial of Service
CVE-2011-0515—doswindows16 ene 2011
KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (c
23RIESGO
abrir ↗
Exploit-DB
Seo Panel 2.2.0 - Cookie-Rendered Persistent Cross-Site Scripting
CVE-2010-4331—webappsphp16 ene 2011
Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Exploit-DB
BetMore Site Suite 4 - 'bid' Blind SQL Injection
CVE-2011-0516—webappsphp16 ene 2011
SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
AWBS 2.9.2 - 'cart.php' Blind SQL Injection
CVE-2011-0510—webappsphp16 ene 2011
SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remo
23RIESGO
abrir ↗
← anteriorpágina 331 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.