Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.402exploits catalogados
34.906CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.861GitHub PoC 13.907VulnCheck XDB 8484Nuclei 4239Metasploit 3468✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
eNdonesia 8.4 - SQL Injection
CVE-2010-3461—webappsphp15 sep 2010
SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mollify 1.6 - 'index.php' Cross-Site Scripting
CVE-2010-3462—webappsphp15 sep 2010
Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP microcms 1.0.1 - Multiple Vulnerabilities
CVE-2010-3480—webappsphp15 sep 2010
Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MP3 Workstation 9.2.1.1.2 - Local Overflow (SEH)
CVE-2009-0476—localwindows15 sep 2010
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP microcms 1.0.1 - Multiple Vulnerabilities
CVE-2010-3481—webappsphp15 sep 2010
Multiple SQL injection vulnerabilities in login.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Multple I-Escorts Products - 'escorts_search.php' Cross-Site Scripting
CVE-2009-4864—webappsphp15 sep 2010
Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
E-Xoopport Samsara 3.1 (Sections Module) - Blind SQL Injection
CVE-2010-3467—webappsphp14 sep 2010
SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial modul
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PaysiteReviewCMS 1.1 - 'search.php' Cross-Site Scripting
CVE-2010-4909—webappsphp14 sep 2010
Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PaysiteReviewCMS - 'image.php' Cross-Site Scripting
CVE-2010-4909—webappsphp14 sep 2010
Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
IBM Lotus Domino iCalendar - Email Address Stack Buffer Overflow
CVE-2010-3407—remotemultiple14 sep 2010
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server i
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.8 - 'Math.random()' Cross Domain Information Disclosure
CVE-2010-3171—remoteunix14 sep 2010
The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.10 through 3.5.11, 3.6.4 through 3.6.8,
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component JGen 0.9.33 - SQL Injection
CVE-2010-3422—webappsphp14 sep 2010
SQL injection vulnerability in the JGen (com_jgen) component 0.9.33 for Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RealPlayer - FLV Parsing Integer Overflow
CVE-2010-3000—doswindows13 sep 2010
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Group Office 3.5.9 - SQL Injection
CVE-2010-3428—webappsphp13 sep 2010
SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Kingsoft AntiVirus 2010.04.26.648 - Kernel Buffer Overflow
CVE-2010-3396—doswindows13 sep 2010
Buffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users to execute arbitrary co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
UCenter Home 2.0 - SQL Injection
CVE-2010-4912—webappsphp13 sep 2010
SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
eshtery CMS - SQL Injection
CVE-2010-3404—webappsasp12 sep 2010
Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Adobe Acrobat and Reader - 'pushstring' Memory Corruption
CVE-2010-2201—localwindows12 sep 2010
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbi
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Word 2007 SP2 - sprmCMajority Buffer Overflow
CVE-2010-1900—doswindows11 sep 2010
Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Con
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Datetopia Buy Dating Site - Cross-Site Scripting
CVE-2009-3355—webappsphp10 sep 2010
Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inje
23RIESGO
abrir ↗
Exploit-DB
fcms 2.2.3 - Remote File Inclusion
CVE-2010-3419—webappsphp10 sep 2010
Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion
CVE-2010-3426—webappsphp10 sep 2010
Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Webkit (Apple Safari < 4.1.2/5.0.2 / Google Chrome < 5.0.375.125) - Memory Corruption
CVE-2010-1813—doswindows10 sep 2010
WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a
23RIESGO
abrir ↗
Exploit-DB
symphony 2.0.7 - Multiple Vulnerabilities
CVE-2010-3457—webappsphp10 sep 2010
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arb
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Excel RTD - Memory Corruption
CVE-2010-1247—localwindows10 sep 2010
Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Ex
28RIESGO
abrir ↗
Exploit-DB
symphony 2.0.7 - Multiple Vulnerabilities
CVE-2010-3458—webappsphp10 sep 2010
SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attack
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Excel RTD - Memory Corruption
CVE-2010-1246—localwindows10 sep 2010
Stack-based buffer overflow in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ES Simple Download 1.0. - Local File Inclusion
CVE-2010-3456—webappsphp09 sep 2010
Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to r
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.3 - XSLT Sort Remote Code Execution
CVE-2010-1199—doswindows09 sep 2010
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
festos CMS 2.3b - Multiple Vulnerabilities
CVE-2010-4893—webappsphp09 sep 2010
Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
← anteriorpágina 352 / 815siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.