Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.655exploits catalogados
39.248CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.347Exploit-DB 24.485GitHub PoC 16.178VulnCheck XDB 9644Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
Advance B2B Script 2.1.3 - 'show_id' / 'pid' SQL Injection
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Realestate Crowdfunding Script 2.7.2 - 'pid' SQL Injection
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DomainSale PHP Script 1.0 - 'id' SQL Injection
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FS Olx Clone 1.0 - 'scat' / 'pid' SQL Injection
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FS Makemytrip Clone 1.0 - 'fl_orig' / 'fl_dest' SQL Injection
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FS Thumbtack Clone 1.0 - 'cat' / 'sc' SQL Injection
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parame
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FS Quibids Clone 1.0 - SQL Injection
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FS Stackoverflow Clone 1.0 - 'keywords' SQL Injection
FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Website Auction Marketplace 2.0.5 - 'cat_id' SQL Injection
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FS Shutterstock Clone 1.0 - 'keywords' SQL Injection
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FS Monster Clone 1.0 - 'Employer_Details.php?id' SQL Injection
FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple Chatting System 1.0.0 - Arbitrary File Upload
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 2.4.0 < 2.4.2 / 2.2.0 < 2.2.10 - CIP Safety Dissector Crash
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissec
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 4.10.5 / < 4.14.3 (Ubuntu) - DCCP Socket Use-After-Free
The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privilege
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hashicorp vagrant-vmware-fusion 4.0.24 - Local Privilege Escalation
An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and ear
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Arq 5.9.7 - Local Privilege Escalation
The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hashicorp vagrant-vmware-fusion 4.0.23 - Local Privilege Escalation
HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo help
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hashicorp vagrant-vmware-fusion 5.0.0 - Local Privilege Escalation
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently su
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hashicorp vagrant-vmware-fusion 5.0.3 - Local Privilege Escalation
If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a loc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Arq 5.9.6 - Local Privilege Escalation
The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hashicorp vagrant-vmware-fusion 5.0.1 - Local Privilege Escalation
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently su
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Perspective ICM Investigation & Case 5.1.1.16 - Privilege Escalation
Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Techno Portfolio Management Panel - 'id' SQL Injection
Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Readymade Classifieds Script 1.0 - SQL Injection
Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-detail
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MistServer 2.12 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS 10.13.1 (High Sierra) - 'Blank Root' Local Privilege Escalation (Metasploit)
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The is
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP iMC Plat 7.2 - Remote Code Execution (2)
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QEMU - NBD Server Long Export Name Stack Buffer Overflow
A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client
46RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP iMC Plat 7.2 - Remote Code Execution
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS 10.13.1 (High Sierra) - 'Blank Root' Local Privilege Escalation
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The is
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.