Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Novell NetIdentity Agent - XTIERRPCPIPE Named Pipe Buffer Overflow (Metasploit)
Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute ar
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BASE - 'base_qry_common' Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_gl
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 8i - TNS Listener SERVICE_NAME Buffer Overflow (Metasploit)
Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo - Cache_Lite Class MosConfig_absolute_path Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and e
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers t
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zinf Audio Player 2.2.1 - '.pls' Local Stack Buffer Overflow (Metasploit)
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cain & Abel 4.9.24 - RDP Buffer Overflow (Metasploit)
Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier,
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 8i - TNS Listener 'ARGUMENTS' Remote Buffer Overflow (Metasploit)
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers t
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'inotify_init()' Memory Leak Local Denial of Service
Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows l
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
America Online ICQ - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec AppStream LaunchObj - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 d
50RIESGO
abrir ↗Exploit-DB
Free Simple Software - SQL Injection
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_TXTEVENT Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - LWRES Dissector getaddrsbyname_request Buffer Overflow (Loop) (Metasploit)
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zenturi ProgramChecker - ActiveX Control Arbitrary File Download (Metasploit)
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Motorola Timbuktu Pro - Directory Traversal / Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu P
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Altiris Deployment Solution - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution
50RIESGO
abrir ↗Exploit-DB
WSN Links - SQL Injection
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x be
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Vista/7 - Local Privilege Escalation (UAC Bypass)
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Wi
71RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe RoboHelp Server 8 - Arbitrary File Upload / Execution (Metasploit)
Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Realtek Media Player Playlist - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Visual Studio - Msmask32.ocx ActiveX Buffer Overflow (MS08-070) (Metasploit)
Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions befo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ColdFusion 8.0.1 - Arbitrary File Upload / Execution (Metasploit)
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PoPToP - Negative Read Overflow (Metasploit)
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fie
60RIESGO
abrir ↗Exploit-DB
AuraCMS 1.62 - 'pfd.php' SQL Injection
SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10.2.0 - Remote Execution (Metasploit)
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 7.0.4 - 'sort' / 'orderBy' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 an
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10.2.0 - Remote Execution (Metasploit)
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation
Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Jimtawl 1.0.2 - Local File Inclusion
Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read a
38RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.