Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.679exploits catalogados
40.329CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.150Exploit-DB 24.488GitHub PoC 17.946VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB
Esoftpro Online Guestbook Pro - Multiple Vulnerabilities
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB
Joomla! Component NinjaMonials - Blind SQL Injection
SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to exec
23RIESGO
abrir ↗Exploit-DB
PHPaaCMS - 'list.php?id' SQL Injection
SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to
23RIESGO
abrir ↗Exploit-DB
Esoftpro Online Contact Manager - Multiple Vulnerabilities
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB
Esoftpro Online Guestbook Pro - Multiple Vulnerabilities
SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TCW PHP Album - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Esoftpro Online Photo Pro 2 - Multiple Vulnerabilities
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB
Joomla! Component Address Book - Blind SQL Injection
SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attacke
23RIESGO
abrir ↗Exploit-DB
PHPaaCMS 0.3.1 - 'show.php?id' SQL Injection
SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'isc_attach_database()' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris sadmind - 'adm_build_path()' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'connectedNodes.ovp'l Remote Command Execution (Metasploit)
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metach
100RIESGO
abrir ↗Exploit-DB
Joomla! Component eventCal 1.6.4 - Blind SQL Injection
SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin - Config File Code Injection (Metasploit)
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remo
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit)
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Borland Interbase - 'isc_create_database()' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution (Metasploit)
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BEA WebLogic - JSESSIONID Cookie Value Overflow (Metasploit)
Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA
50RIESGO
abrir ↗Exploit-DB
ISC DHCPD - Denial of Service
ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit)
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DoubleTake/HP StorageWorks Storage Mirroring Service - Authentication Overflow (Metasploit)
Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'VML' Fill Method Code Execution (MS06-055) (Metasploit)
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050) (Metasploit)
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Coppermine Photo Gallery 1.4.14 - 'picEditor.php' Command Execution (Metasploit)
include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processing
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NCTAudioFile2 2.x - ActiveX Control 'SetFormatLikeSample()' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple prod
50RIESGO
abrir ↗Exploit-DB
Sun Java Web Server 7.0 u7 - Remote Overflow
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zabbix Agent - 'net.tcp.listen' Command Injection (Metasploit)
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote att
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Firebird Relational Database - 'SVC_attach()' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RIESGO
abrir ↗Exploit-DB
Ziggurat Farsi CMS - SQL Injection
SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB - 'viewtopic.php' Arbitrary Code Execution (Metasploit)
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrase
60RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.