Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
PHPShop 2.1 EE - 'name_new' Cross-Site Scripting
CVE-2010-4836—webappsphp10 nov 2010
Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to injec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WeBid 0.85P1 - Multiple Input Validation Vulnerabilities
CVE-2010-4873—webappsphp10 nov 2010
Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗
Exploit-DB
IBM OmniFind - Local Privilege Escalation
CVE-2010-3895—localmultiple09 nov 2010
esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitr
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise Internet Agent - IMAP 'LIST LSUB' Remote Code Execution
CVE-2010-4717—doslinux09 nov 2010
Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWis
23RIESGO
abrir ↗
Exploit-DB
IBM OmniFind - Local Privilege Escalation
CVE-2010-4236—localmultiple09 nov 2010
Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM OmniFind - 'command' Cross-Site Scripting
CVE-2010-3893—remotemultiple09 nov 2010
The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SI
23RIESGO
abrir ↗
Exploit-DB
IBM OmniFind Crawler - Denial of Service
CVE-2010-3899—dosmultiple09 nov 2010
IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote w
23RIESGO
abrir ↗
Exploit-DB
IBM OmniFind - Cross-Site Request Forgery
CVE-2010-3891—webappsmultiple09 nov 2010
Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind En
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle MySQL < 5.1.49 - 'WITH ROLLUP' Denial of Service
CVE-2010-3678—dosmultiple09 nov 2010
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2)
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise Internet Agent - IMAP 'LIST' Remote Code Execution
CVE-2010-4711—doslinux09 nov 2010
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.0
28RIESGO
abrir ↗
Exploit-DB
IBM OmniFind - Buffer Overflow
CVE-2010-3894—dosmultiple09 nov 2010
Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.crypt
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JQuarks4s 1.0.0 - Blind SQL Injection
CVE-2010-4638—webappsphp09 nov 2010
SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'net/core/filter.c' Local Information Disclosure
CVE-2010-4158—locallinux09 nov 2010
The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain mem
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
pfSense - 'interfaces.php?if' Cross-Site Scripting
CVE-2010-4412—remotehardware08 nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
pfSense - 'pkg.php?xml' Cross-Site Scripting
CVE-2010-4412—remotehardware08 nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Novell Groupwise 8.0 - Multiple Remote Vulnerabilities
CVE-2010-4715—dosnovell08 nov 2010
Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Nove
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
pfSense - 'status_graph.php?if' Cross-Site Scripting
CVE-2010-4412—remotehardware08 nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ProDesk 1.5 - Local File Inclusion
CVE-2008-6222—webappsphp08 nov 2010
Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin Vodpod Video Gallery 3.1.5 - 'vodpod_gallery_thumbs.php' Cross-Site Scripting
CVE-2010-4875—webappsphp08 nov 2010
Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery P
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Cookex Agency CKForms - Local File Inclusion
CVE-2010-1345—webappsphp08 nov 2010
Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote a
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
pfSense - 'pkg_edit.php?id' Cross-Site Scripting
CVE-2010-4412—remotehardware08 nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASPilot Pilot Cart 7.3 - Multiple Vulnerabilities
CVE-2010-4631—webappsasp07 nov 2010
Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASPilot Pilot Cart 7.3 - Multiple Vulnerabilities
CVE-2008-2688—webappsasp07 nov 2010
SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ProFTPd IAC 1.3.x - Remote Command Execution
CVE-2010-4221—remotelinux07 nov 2010
Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow rem
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP 5.3.x - 'mb_strcut()' Information Disclosure
CVE-2010-4156—remotephp07 nov 2010
The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtai
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ASPilot Pilot Cart 7.3 - Multiple Vulnerabilities
CVE-2010-4632—webappsasp07 nov 2010
Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Flash - ActionIf Integer Denial of Service
CVE-2010-3639—doswindows05 nov 2010
Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sami HTTP Server 2.0.1 - GET Denial of Service
CVE-2007-0548—doswindows05 nov 2010
KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number o
23RIESGO
abrir ↗
Exploit-DB
Google Android 2.0 < 2.1 - Code Execution (Reverse Shell 10.0.2.2:2222/TCP)
CVE-2010-1807—remoteandroid05 nov 2010
WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not p
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component ccInvoices - SQL Injection
CVE-2010-4853—webappsphp05 nov 2010
SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗
← anteriorpágina 342 / 817siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.