Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.896exploits catalogados
40.390CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.190Exploit-DB 24.488GitHub PoC 18.017VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
Upload Service 1.0 - 'top.php?maindir' Remote File Inclusion
PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when register_globals is enabled, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat 3.1.6 441 - 'aim://' URL Handler Format String (PoC)
Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dere
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x Kernel - 'shared_region_map_file_np()' Memory Corruption
The shared_region_map_file_np function in Apple Mac OS X 10.4.8 and earlier kernel allows local users to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) 2.0.1 - Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SMF 1.1 - 'index.php' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote aut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySpeach 2.1b - 'up.php' Remote File Inclusion
PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST
Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Help Workshop 4.03.0002 - '.HPJ' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ArsDigita Community System 3.4.x - Directory Traversal
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Educat
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP JetDirect FTP Print Server - 'RERT' Denial of Service
The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Help Workshop 4.03.0002 - '.cnt' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.5 - 'login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KarjaSoft Sami FTP Server 2.0.2 - USER/PASS Remote Buffer Overflow
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - VML Download and Execute (MS07-004)
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'power_search.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'send_pwd.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'suggest_category.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'Sendmail.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle January 2007 Security Update - Multiple Vulnerabilities
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'new.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craft
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'tell_friend.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'user_detail.php?u' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'login.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'mailing_list.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DT_Guestbook 1.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is enab
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.