Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.634exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
FreeBSD - 'mbufs()' sendfile Cache Poisoning Privilege Escalation
FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, whi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7 (RedHat High Performance Computing [HPC]) - 'utilities.php?Filter' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.0.20 < 3.0.25rc3 - 'Username' map script' Command Execution (Metasploit)
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Free Simple Software 1.0 - Remote File Inclusion
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - nt!NtCreateThread Race Condition with Invalid Code Segment (MS10-047)
Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Free Simple Software 1.0 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attac
23RIESGO
abrir ↗Exploit-DB
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050)
Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process t
35RIESGO
abrir ↗Exploit-DB
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050)
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RIESGO
abrir ↗Exploit-DB
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050)
Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packets
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Win32k!GreStretchBltInternal() Does Not Handle src == dest
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vist
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Free Simple Software 1.0 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - KTM Invalid Free with Reused Transaction GUID (MS10-047)
Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, al
41RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks (MS10-047)
The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 8 - 'toStaticHTML()' HTML Sanitization Bypass
The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Se
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Weblinks - 'Itemid' SQL Injection
SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB
PHP-Fusion - Local File Inclusion
Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Acrobat Acrobat - Font Parsing Integer Overflow
Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe ColdFusion - Directory Traversal
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CA Advantage Ingres 2.6 - Multiple Buffer Overflow Vulnerabilities (PoC)
Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple
23RIESGO
abrir ↗Exploit-DB
Get Tube - SQL Injection
SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB
MailForm 1.2 - Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (2)
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (HTTP) (MS07-017) (Metasploit)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RIESGO
abrir ↗Exploit-DB
clearBudget 0.9.8 - Remote File Inclusion
PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB
Saurus CMS 4.7.0 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - CreateWindow Function Callback (MS10-048)
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vist
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Teams - Multiple Blind SQL Injections
SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to
23RIESGO
abrir ↗Exploit-DB
Microsoft Windows - 'SfnLOGONNOTIFY' Privilege Escalation (MS10-048)
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not p
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Amblog 1.0 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Msxml2.XMLHTTP.3.0 - Response Handling Memory Corruption (MS10-051)
Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to ex
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.