Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
76.565exploits catalogados
34.981CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.899GitHub PoC 13.961VulnCheck XDB 8542Nuclei 4248Metasploit 3472✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB✓ VexDay Proof
K-Search - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion
Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! all
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Veritas Backup Exec Name Service - Remote Overflow (Metasploit)
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox/Thunderbird/SeaMonkey - XSLT Integer Overflow
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server < 4.01b - LOGIN Buffer Overflow (Metasploit)
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
K-Search - SQL Injection / Cross-Site Scripting
Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ArcServe - Media Service Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Me
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BolinTech DreamFTP Server 1.02 - Format String (Metasploit)
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor Universal Agent - Remote Overflow (Metasploit)
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticate
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Messenger Client - Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Video Community portal - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cornerstone CMS - SQL Injection
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GAMSoft TelSrv 1.5 - 'Username' Remote Buffer Overflow (Metasploit)
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 2.2.8 (OSX/PPC) - 'trans2open' Remote Overflow (Metasploit)
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RIESGO
abrir ↗Exploit-DB
Linker IMG 1.0 - Remote File Inclusion
Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
G.CMS Generator - SQL Injection
SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang pa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 2.2.8 (Solaris SPARC) - 'trans2open' Remote Overflow (Metasploit)
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jamroom 4.0.2/4.1.x - 'forum.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in forum.php in Jamroom before 4.1.9 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere ILOG JRules 6.7 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in content/internalError.jsp in IBM WebSphere ILOG JRules 6.7 allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MoreAmp - '.maf' Local Stack Buffer Overflow (SEH)
Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OroHYIP - SQL Injection
SQL injection vulnerability in withdraw_money.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Shareasale Script - SQL Injection
SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
iBoutique - 'page' SQL Injection / Cross-Site Scripting
SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
iBoutique - 'page' SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in iBoutique 4.0 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Overstock Script - SQL Injection
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Orbital Viewer 1.04 - '.ov' Local Universal Stack Overflow (SEH)
Stack-based buffer overflow in Orbital Viewer 1.04 allows user-assisted remote attackers to execute arbitrary code via a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MoreAmp - '.maf' Buffer Overflow (PoC)
Stack-based buffer overflow in MoreAmp allows remote attackers to execute arbitrary code via a long line in a song list
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component RSComments 1.0.0 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments) component 1.0.0 Rev 2 for Joomla!
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Elite Gaming Ladders 3.5 - 'ladder[id]' SQL Injection
SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.