Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.020exploits catalogados

35.276CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8604Nuclei 4251Metasploit 3473✓ solo verificadosrecientes populares riesgo

21.899 exploits

Referência

CVE-2016-1531

CVE-2016-1531—

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.

38RIESGO

Referência

CVE-2010-0973

CVE-2010-0973—

SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to

23RIESGO

Referência

CVE-2016-1555

CVE-2016-1555CRITICALbajo ataque

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear

100RIESGO

Referência

CVE-2016-1596

CVE-2016-1596—

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic

23RIESGO

Referência

CVE-2016-1596

CVE-2016-1596—

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic

23RIESGO

Referência

CVE-2016-1611

CVE-2016-1611—

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2016-1719

CVE-2016-1719—

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RIESGO

Referência

CVE-2018-1000861

CVE-2018-1000861CRITICALbajo ataque

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and ea

100RIESGO

Referência✓ VexDay Proof

PHP-Fusion module Expanded Calendar 2.x - SQL Injection

CVE-2007-5187—webappsphp

SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for P

23RIESGO

Referência

CVE-2020-35847

CVE-2020-35847—

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

60RIESGO

Referência

CVE-2020-35847

CVE-2020-35847—

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

60RIESGO

Referência

CVE-2015-8562

CVE-2015-8562—

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RIESGO

Referência

CVE-2015-8562

CVE-2015-8562—

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RIESGO

Referência

CVE-2022-0377

CVE-2022-0377—

LearnPress < 4.1.5 - Arbitrary Image Renaming

23RIESGO

Referência✓ VexDay Proof

MusicBox 2.3.7 - 'artistId' SQL Injection

CVE-2008-2125—webappsphp

SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary S

23RIESGO

Referência

CVE-2010-4916

CVE-2010-4916—

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbi

23RIESGO

Referência

CVE-2010-4917

CVE-2010-4917—

SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

Referência

CVE-2010-4917

CVE-2010-4917—

SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL command

23RIESGO

Referência

CVE-2016-2004

CVE-2016-2004—

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary cod

60RIESGO

Referência

CVE-2016-2004

CVE-2016-2004—

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary cod

60RIESGO

Referência

CVE-2021-3318

CVE-2021-3318—

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.