Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.313exploits catalogados
34.834CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8484Nuclei 4237Metasploit 3467✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/pop?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
CVE-2010-3847—locallinux22 oct 2010
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pro
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/webseal?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/user?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/gso?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/acl?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/os?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/gsogroup?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ivt/ivtserver?parm1' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager for E-Business - '/ibm/wpm/rule?method' Cross-Site Scripting
CVE-2010-4120—webappsmultiple22 oct 2010
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
W-Agora 4.2.1 - 'search.php?bn' Cross-Site Scripting
CVE-2010-4868—webappsphp22 oct 2010
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Shockwave Player - rcsL Memory Corruption (Metasploit)
CVE-2010-3653—remotewindows22 oct 2010
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrar
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
W-Agora 4.2.1 - 'search.php3?bn' Traversal Local File Inclusion
CVE-2010-4867—webappsphp22 oct 2010
Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Shockwave Player - 'rcsL chunk' Memory Corruption
CVE-2010-3653—remotewindows21 oct 2010
The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrar
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
LibSMI smiGetNode - Buffer Overflow When Long OID Is Given In Numerical Form
CVE-2010-2891—doslinux20 oct 2010
Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute ar
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft ASP.NET - Auto-Decryptor File Download (MS10-070)
CVE-2010-3332—remotewindows20 oct 2010
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Intern
35RIESGO
abrir ↗
Exploit-DB
Oracle Sun Java System Web Server - HTTP Response Splitting
CVE-2010-3514—webappsjsp20 oct 2010
Unspecified vulnerability in the Oracle iPlanet Web Server (Sun Java System Web Server) component in Oracle Sun Products
23RIESGO
abrir ↗
Exploit-DB
Oracle JRE - java.net.URLConnection class Same-of-Origin 'SOP' Policy Bypass
CVE-2010-3573—remotewindows20 oct 2010
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow
CVE-2010-4371—localwindows19 oct 2010
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vect
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
4Site CMS 2.6 - 'cat' SQL Injection
CVE-2010-4152—webappsphp19 oct 2010
SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to ex
23RIESGO
abrir ↗
Exploit-DB
phpCheckZ 1.1.0 - Blind SQL Injection
CVE-2010-4143—webappsphp19 oct 2010
SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation
CVE-2010-3904HIGHbajo ataquelocallinux19 oct 2010
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the
91RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JBoss JMX - Console Deployer Upload and Execute (Metasploit)
CVE-2007-1036—remotemultiple19 oct 2010
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox SeaMonkey 3.6.10 / Thunderbird 3.1.4 - 'document.write' Memory Corruption
CVE-2010-3179—remotelinux19 oct 2010
Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RedHat Piranha Virtual Server Package - 'passwd.php3' Arbitrary Command Execution (Metasploit)
CVE-2000-0322—webappsphp18 oct 2010
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary command
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU C library dynamic linker - '$ORIGIN' Expansion
CVE-2011-0536—locallinux18 oct 2010
Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (aka
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Brooky CubeCart 2.0.1 - SQL Injection
CVE-2004-1580—webappsphp18 oct 2010
SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GNU C library dynamic linker - '$ORIGIN' Expansion
CVE-2010-3847—locallinux18 oct 2010
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not pro
38RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Fat Player 0.6b - '.wav' Local Buffer Overflow (SEH)
CVE-2009-4962—localwindows18 oct 2010
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RedHat Piranha Virtual Server Package - 'passwd.php3' Arbitrary Command Execution (Metasploit)
CVE-2000-0248—webappsphp18 oct 2010
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password tha
60RIESGO
abrir ↗
← anteriorpágina 343 / 815siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.