Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
80.095exploits catalogados
36.945CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.442GitHub PoC 15.312VulnCheck XDB 8970Nuclei 4393Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Mapos-Scripts.de Gastebuch 1.5 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS Next Hop Resolution Protocol (NHRP) - Denial of Service
Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote at
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bilder Galerie 1.0 - 'index.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP mSQL (msql_connect) - Local Buffer Overflow
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a lo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 11 - AU Divide-by-Zero Denial of Service
Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (app
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Coppermine Photo Gallery 1.3/1.4 - 'YABBSE.INC.php' Remote File Inclusion
PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VietPHP - '/admin/index.php?language' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VietPHP - '_functions.php?dirpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VietPHP - 'index.php?language' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BIND 9 0.3beta - DNS Cache Poisoning
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolve
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
snif 1.5.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlueCat Networks Adonis 5.0.2.8 - TFTP Privilege Escalation
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Panda AntiVirus 2008 - Local Privilege Escalation
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
J! Reactions 1.8.1 - comPath Remote File Inclusion
PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 GALLERY Module - 'gid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 EZSHOPINGCART Module - 'cid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Next Gen Portfolio Manager - 'default.asp' Multiple SQL Injections
SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 FAQ Module - 'mid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Tour de France Pool 1.0.1 Module - MosConfig_absolute_path Remote File Inclusion
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hunkaray Okul Portali 1.1 - 'Duyuruoku.asp' SQL Injection
SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tor 0.1.2.15 - ControlPort Missing Authentication Unauthorized Access
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebDirector - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yahoo! Widget < 4.0.5 - 'GetComponentVersion()' Remote Overflow
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Asterisk < 1.2.22/1.4.8 - IAX2 Channel Driver Remote Crash
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, A
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox/Thunderbird/SeaMonkey - Chrome-Loaded About:Blank Script Execution
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlueSkyChat ActiveX Control 8.1.2 - Remote Buffer Overflow
Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebEvent 4.03 - 'Webevent.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'index.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'admin.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.