Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Eclime 1.1.2b - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
enano CMS 1.1.7pl1 - Multiple Vulnerabilities
SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and
23RIESGO
abrir ↗Exploit-DB
Pandora Fms 3.1 - Directory Traversal / Local File Inclusion
PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BugTracker.NET 3.4.4 - SQL Injection / Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pandora Fms 3.1 - OS Command Injection
operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary comm
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAP Business One License Manager 2005 - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote atta
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WU-FTPD - Site EXEC/INDEX Format String (Metasploit)
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remo
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arb
28RIESGO
abrir ↗Exploit-DB
Orbis CMS 1.0.2 - Arbitrary File Upload
Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users t
23RIESGO
abrir ↗Exploit-DB
DynPG 4.2.0 - Multiple Vulnerabilities
languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
POP Peeper 3.4 - UIDL Buffer Overflow (Metasploit)
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP LaserJet - Directory Traversal in PJL Interface
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printer
28RIESGO
abrir ↗Exploit-DB
Diferior 8.03 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MicroNetSoft RV Dealer Website - 'search.asp' / showAlllistings.asp' SQL Injection
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Site2Nite Big Truck Broker - 'txtSiteId' SQL Injection
SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB
CA Internet Security Suite 2010 - 'KmxSbx.sys' Kernel Pool Overflow
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of
23RIESGO
abrir ↗Exploit-DB
Skeletonz CMS - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service
The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jurpopage 0.2.0 - SQL Injection
SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jurpopage 0.2.0 - SQL Injection
Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Banner 2009.05.18 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when ma
23RIESGO
abrir ↗Exploit-DB
Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does n
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Banner 2009.05.18 - '/member.php' Multiple SQL Injection / Authentication Bypass
Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_g
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SystemTap - Local Privilege Escalation
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allow
38RIESGO
abrir ↗Exploit-DB
Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays repre
23RIESGO
abrir ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar - SQL Injection
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta
23RIESGO
abrir ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar - SQL Injection
SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows r
23RIESGO
abrir ↗Exploit-DB
SiteEngine 7.1 - SQL Injection
SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zenturi ProgramChecker - ActiveX Control Arbitrary File Download (Metasploit)
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.