Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.634exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Eureka Email Client 2.2q - ERR Remote Buffer Overflow (Metasploit) (2)
Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error m
50RIESGO
abrir ↗Exploit-DB
Adobe Premier Pro CS4 - 'ibfs32.dll' DLL Hijacking
Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly r
28RIESGO
abrir ↗Exploit-DB
Microsoft Office Groove 2007 - 'mso.dll' DLL Hijacking
Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a T
28RIESGO
abrir ↗Exploit-DB
Microsoft Visio 2003 - 'mfc71enu.dll' DLL Hijacking
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Group Convertor - 'imm.dll' DLL Hijacking
Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and p
28RIESGO
abrir ↗Exploit-DB
Adobe Dreamweaver CS5 11.0 build 4909 - 'mfc90loc.dll' DLL Hijacking
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CorelDRAW X3 13.0.0.576 - 'crlrib.dll' DLL Hijacking
Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gai
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTP daemon readvar - Remote Buffer Overflow (Metasploit)
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RIESGO
abrir ↗Exploit-DB
Microsoft Windows Movie Maker 2.6.4038.0 - 'hhctrl.ocx' DLL Hijacking
Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via
28RIESGO
abrir ↗Exploit-DB
Foxit Reader 4.0 - '.pdf' Multiple Stack Based Buffer Overflow 'Jailbreak'
Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpr
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opera 10.61 - 'dwmapi.dll' DLL Hijacking
Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmap
23RIESGO
abrir ↗Exploit-DB
TeamViewer 5.0.8703 - 'dwmapi.dll' DLL Hijacking
Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers
23RIESGO
abrir ↗Exploit-DB
Microsoft PowerPoint 2010 - 'pptimpconv.dll' DLL Hijacking
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attacker
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.6.8 - 'dwmapi.dll' DLL Hijacking
Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 an
28RIESGO
abrir ↗Exploit-DB
Microsoft PowerPoint 2010 - 'pptimpconv.dll' DLL Hijacking
Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to e
28RIESGO
abrir ↗Exploit-DB
Microsoft Windows 7 - 'wab32res.dll wab.exe' DLL Hijacking
Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP
28RIESGO
abrir ↗Exploit-DB
Microsoft Windows 7 - 'wab32res.dll wab.exe' DLL Hijacking
Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 1.2.10 - 'airpcap.dll' DLL Hijacking
Untrusted search path vulnerability in Wireshark 0.8.4 through 1.0.15 and 1.2.0 through 1.2.10 allows local users, and p
23RIESGO
abrir ↗Exploit-DB
Adobe Dreamweaver CS4 - 'ibfs32.dll' DLL Hijacking
Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
μTorrent (uTorrent) 2.0.3 - 'plugin_dll.dll' DLL Hijacking
Untrusted search path vulnerability in uTorrent 2.0.3 and earlier allows local users, and possibly remote attackers, to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MicroP 0.1.1.1600 - 'mppl' Local Buffer Overflow
Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl f
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Auto CMS 1.6 - 'autocms.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB
Microsoft Excel - FEATHEADER Record (MS09-067)
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Conv
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OraclMySQL 5.1.48 - 'LOAD DATA INFILE' Denial of Service
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL err
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle MySQL < 5.1.49 - Malformed 'BINLOG' Arguments Denial of Service
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via
28RIESGO
abrir ↗Exploit-DB
Microsoft Word - Record Parsing Buffer Overflow (MS09-027)
Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 200
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle MySQL 5.1.48 - 'HANDLER' Interface Denial of Service
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysq
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 5.1.48 - 'EXPLAIN' Denial of Service
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mys
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - 'utilities.php?Filter' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 5.1.48 - 'Temporary InnoDB' Tables Denial of Service
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by c
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.