Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
80.184exploits catalogados
37.029CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8970Nuclei 4394Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
PrecisionID Barcode ActiveX 1.9 - Remote Denial of Service
Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java JDK 1.x - Multiple Vulnerabilities
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Computer Associates BrightStor ARCserve Backup 11.5 - mediasvr caloggerd Denial of Service
Multiple unspecified vulnerabilities in (1) mediasvr and (2) caloggerd in CA BrightStor ARCServe BackUp v9.01 through R1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Caucho Resin 3.1 - Encoded Space Request Full Path Disclosure
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the sys
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Vista - Forged ARP packet Network Stack Denial of Service
Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers to
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeWizardX - 'DEWizardAX.ocx' Arbitrary File Overwrite
The DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to overwrite arbitrary fil
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Caucho Resin 3.1 - '/web-inf' Traversal Arbitrary File Access
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jetbox CMS 2.1 - view/supplynews Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jetbox CMS 2.1 - '/view/search/?path' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jetbox CMS 2.1 Email - 'FormMail.php' Input Validation
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTING
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS Module MyConference 1.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow (PoC)
Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.0.21 < 3.0.24 - LSA trans names Heap Overflow (Metasploit)
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SonicBB 1.0 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
webdesproxy 0.0.1 - 'exec-shield' GET Remote Code Execution
Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involvin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Akismet 2.1.3 - Cross-Site Scripting
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SonicBB 1.0 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NagiosQL 2005 2.00 - 'prepend_adm.php' Remote File Inclusion
PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2.00-P00 and earlier allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EQdkp 1.3.1 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CommuniGate Pro 5.1.8 - Web Mail HTML Injection
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP FirstPost 0.1 - 'block.php?Include' Remote File Inclusion
PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LibEXIF 0.6.x - Exif_Data_Load_Data_Entry Remote Integer Overflow
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TFTP Server TFTPDWin 0.4.2 - Directory Traversal
Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7 - Arbitrary File Rewrite (MS07-027)
Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Expl
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
McAfee Security Center IsOldAppInstalled - ActiveX Buffer Overflow
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMG
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Microsystems Solaris SRSEXEC 3.2.x - Arbitrary File Read Local Information Disclosure
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file per
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Multi User Randomizer 2006.09.13 - 'Configure_Plugin.TPL.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
aForum 1.32 - 'CommonAbsDir' Remote File Inclusion
PHP remote file inclusion vulnerability in common/errormsg.php in aForum 1.32 and possibly earlier, when register_global
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Barcodewiz ActiveX Control 2.0 - 'Barcodewiz.dll' Remote Buffer Overflow (PoC)
Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GDivX Zenith Player AviFixer Class - 'fix.dll 1.0.0.1' Buffer Overflow (PoC)
SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.