Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
80.557exploits catalogados
37.313CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.478Referência 23.776GitHub PoC 15.367VulnCheck XDB 9019Nuclei 4415Metasploit 3502✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'topic.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'TimeUnit.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Publication.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Python 2.5 - 'PyLocale_strxfrm' Remote Information Leak
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'LoginAttempts.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - '/implementation/Management/db_connect.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'article.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'image.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Log.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Taltech Tal Bar Code - ActiveX Control Buffer Overflow
The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of servic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'LocalizerLanguage.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleAttachment.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleComment.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Advanced Guestbook 2.4.2 - 'Lang' Cookie Local File Inclusion
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Country.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'DatabaseObject.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'Event.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'IssuePublish.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Campsite 2.6.1 - 'LocalizerConfig.php?g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 4.0 - 'index.php?l' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FipsCMS 2.1 - 'pid' SQL Injection
SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ELinks Relative 0.10.6/011.1 - Path Arbitrary Code Execution
Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP PEAR 1.5.3 - INSTALL-AS Attribute Arbitrary File Overwrite
Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to ov
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Versalsoft HTTP File Uploader - ActiveX 6.36 AddFile Remote Denial of Service
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 4.0 - 'index.php' Multiple SQL Injections
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OTRS 2.0.4 - index.pl Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Office Viewer OCX 3.2.0.5 - Multiple Denial of Service Vulnerabilities
Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zoo 2.10 - .ZOO Compression Algorithm Remote Denial of Service
PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.