Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Oracle Java 6 - OBJECT tag 'launchjnlp'/'docbase' Remote Buffer Overflow
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows r
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Collabtive 0.65 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Collabtive 0.65 - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AdaptCMS 2.0.1 Beta - Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.53/7.51 - 'OVAS.exe' Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Fusion Middleware 10.1.2/10.1.3 - BPEL Console Cross-Site Scripting
Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BaconMap 1.0 - Local File Disclosure
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OrangeHRM 2.6.0.1 - Local File Inclusion
Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BaconMap 1.0 - SQL Injection
SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Site2Nite Auto e-Manager - SQL Injection
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion Mod Mg User Fotoalbum 1.0.1 - SQL Injection
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX EvoCam Web Server - GET Buffer Overflow (Metasploit)
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JS Calendar 1.5.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
hplip - 'hpssd.py' From Address Arbitrary Command Execution (Metasploit)
hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ClamAV Milter - Blackhole-Mode Remote Code Execution (Metasploit)
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UFO: Alien Invasion IRC Client (OSX) - Remote Buffer Overflow (Metasploit)
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Community Builder Enhanced (CBE) 1.4.8/1.4.9/1.4.10 - Local File Inclusion / Remote Code Execution
Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Pwngame - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JS Calendar 1.5.1 - Multiple Vulnerabilities
SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flex Timesheet - Authentication Bypass
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
xWeblog 2.2 - 'arsiv.asp?tarih' SQL Injection
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OPEN IT OverLook 5 - 'title.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
xWeblog 2.2 - 'oku.asp?makale_id' SQL Injection
SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB
libc/glob(3) - Resource Exhaustion / Remote ftpd-anonymous (Denial of Service)
Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Acrobat and Reader - Array Indexing Remote Code Execution
Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execut
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Club Manager - 'cm_id' SQL Injection
SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP-UX LPD - Command Execution (Metasploit)
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of ser
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft ASP.NET - Padding Oracle (MS10-070)
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Intern
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i XDB (Windows x86) - FTP UNLOCK Overflow (Metasploit)
Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.