Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
76.496exploits catalogados
34.964CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8510Nuclei 4239Metasploit 3468✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'win32k.sys' Driver 'CreateDIBPalette()' Local Buffer Overflow
Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
uzbl 'uzbl-core' - '@SELECTED_URI' Mouse Button Bindings Command Injection
The default configuration of the <Button2> binding in Uzbl before 2010.08.05 does not properly use the @SELECTED_URI fea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ccTiddly 1.7.6 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DiamondList - '/user/main/update_category?category[description]' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
APBoard 2.1.0 - 'board.php?id' SQL Injection
SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DiamondList - '/user/main/update_settings?setting[site_title]' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hulihan Applications BXR 0.6.8 - SQL Injection / HTML Injection
SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DiamondList 0.1.6 - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection
SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB
Open Blog 1.2.1 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote att
23RIESGO
abrir ↗Exploit-DB
Open Blog 1.2.1 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 2.7.3.700 - '.m3u' / '.pls' / '.smi' / '.wpl' / '.wax' / '.wvx' / '.ram' Local Overflow
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS - '.pdf' Local Privilege Escalation 'Jailbreak'
Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allo
23RIESGO
abrir ↗Exploit-DB
EMC Celerra NAS Appliance - Unauthorized Access to Root NFS Export
The EMC Celerra Network Attached Storage (NAS) appliance accepts external network traffic to IP addresses intended for a
23RIESGO
abrir ↗Exploit-DB
Avast! Internet Security 5.0 - 'aswFW.sys' Kernel Driver IOCTL Memory Pool Corruption
Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denia
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FathFTP 1.8 - 'RasIsConnected Method' ActiveX Buffer Overflow (SEH)
Multiple buffer overflows in the FathFTP ActiveX control 1.7 allow remote attackers to execute arbitrary code via (1) th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle MySQL - 'ALTER DATABASE' Remote Denial of Service
MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (serve
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS - '.pdf' Local Privilege Escalation 'Jailbreak'
Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpr
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle MySQL < 5.1.50 - Privilege Escalation
The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave confi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.53 - 'OvJavaLocale' Buffer Overflow
Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote at
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JBoss - Java Class DeploymentFileRepository WAR Deployment (Metasploit)
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
100RIESGO
abrir ↗Exploit-DB
Joomla! Component CamelcityDB 2.2 - SQL Injection
SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SigPlus Pro 3.74 - ActiveX 'LCDWriteString()' Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)
Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Barcodewiz Barcode ActiveX Control 3.29 - Remote HeapSpray (Internet Explorer 6/7)
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Barcodewiz BarCode ActiveX 3.29 - Denial of Service (PoC)
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow (SEH)
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KVIrc 4.0 - '\r' Carriage Return in DCC Handshake Remote Command Execution
The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ (backslash) characters, which al
23RIESGO
abrir ↗Exploit-DB
AV Arcade 3 - Cookie Authentication Bypass
SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16,
60RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.