Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Microsoft WMI Administration Tools - ActiveX Buffer Overflow (Metasploit)
The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CakePHP 1.3.5/1.2.8 - Cache Corruption (Metasploit)
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Objectivity/DB - Lack of Authentication
The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows rem
28RIESGO
abrir ↗Exploit-DB
Sielco Sistemi Winlog 2.07.00 - Stack Overflow
Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows
50RIESGO
abrir ↗Exploit-DB
Real Networks RealPlayer SP - 'RecordClip' Method Remote Code Execution
The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Win32k - Keyboard Layout (MS10-073)
The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteScape Enterprise Forum 7 - TCL Injection
support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator charact
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Blackmoon FTP 3.1 Build 1735/1736 - Denial of Service
FTPService.exe in Blackmoon FTP 3.1 Build 1735 and Build 1736 (3.1.7.1736), and possibly other versions before 3.1.8.173
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Data Access Components - Remote Overflow (MS11-002)
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properl
35RIESGO
abrir ↗Exploit-DB
Wireshark - ZigBee ZCL Dissector Infinite Loop Denial of Service
epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft RPC DCOM Interface - Remote Overflow (MS03-026) (Metasploit)
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote
60RIESGO
abrir ↗Exploit-DB
diafan.cms 4.3 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)
Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted r
23RIESGO
abrir ↗Exploit-DB
DriveCrypt 5.3 - Local Kernel Ring0 SYSTEM
DCR.sys driver in SecurStar DriveCrypt 5.4, 5.3, and earlier allows local users to execute arbitrary code via a crafted
23RIESGO
abrir ↗Exploit-DB
vam shop 1.6 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in VaM Shop 1.6, 1.6.1, and probably earlier versions llow remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mono/Moonlight Generic Type Argument - Privilege Escalation
Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic
28RIESGO
abrir ↗Exploit-DB
vam shop 1.6 - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Common Control Library 'Comctl32' Heap Overflow (MS10-081)
Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows
35RIESGO
abrir ↗Exploit-DB
Linux Kernel (Solaris 10 / < 5.10 138888-01) - Local Privilege Escalation
tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (pa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JBoss JMX - Console Beanshell Deployer WAR Upload and Deployment (Metasploit)
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TinyBB 1.2 - SQL Injection
SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lotus CMS Fraise 3.0 - Local File Inclusion / Remote Code Execution
Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allo
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.2 < 1.3.0 (Linux) - 'sreplace' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably auth
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KingView 6.5.3 - SCADA HMI Heap Overflow
Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary co
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.2 rc3 < 1.3.3b (Linux) - Telnet IAC Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow rem
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS/PWS - CGI Filename Double Decode Command Execution (MS01-026) (Metasploit)
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encodi
60RIESGO
abrir ↗Exploit-DB
Zwii 2.1.1 - Remote File Inclusion
Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is disabled and register_glo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetSupport Manager Agent - Remote Buffer Overflow (1)
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Signed Applet Social Engineering - Code Execution (Metasploit)
The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; a
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
axdcms-0.1.1 - Local File Inclusion
Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.