Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.896exploits catalogados
40.390CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.190Exploit-DB 24.488GitHub PoC 18.017VulnCheck XDB 10.108Nuclei 4556Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
VideoWhisper PHP 2 Way Video Chat - 'r' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Python 3.2 - 'audioop' Module Memory Corruption
The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string length
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yamamah Photo Gallery 1.00 - 'calbums' SQL Injection
SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yamamah Photo Gallery 1.00 - 'download.php' Local File Disclosure
Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Digital Interchange Calendar - SQL Injection
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UnrealIRCd 3.2.8.1 - Remote Downloader/Execute
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UTStats - Cross-Site Scripting / SQL Injection / Full Path Disclosure
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Litespeed Technologies - Web Server Remote Poison Null Byte
LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scrip
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Digital Interchange Document Library - SQL Injection
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UTStats - Cross-Site Scripting / SQL Injection / Full Path Disclosure
Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VU Web Visitor Analyst - Authentication Bypass
Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB
Yamamah - 'news' SQL Injection / Source Code Disclosure
index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the
23RIESGO
abrir ↗Exploit-DB
Yamamah - 'news' SQL Injection / Source Code Disclosure
SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote at
23RIESGO
abrir ↗Exploit-DB
Yamamah - 'news' SQL Injection / Source Code Disclosure
SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SolarWinds TFTP Server 10.4.0.13 - Denial of Service
SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.
28RIESGO
abrir ↗Exploit-DB
Yamamah - 'news' SQL Injection / Source Code Disclosure
Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BrightSuite Groupware - SQL Injection
SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yamamah 1.0 - SQL Injection
SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AneCMS 1.x - '/modules/blog/index.php' SQL Injection
SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Power Tab Editor 1.7 (Build 80) - Local Buffer Overflow
Stack-based buffer overflow in Power Tab Editor 1.7 build 80 allows user-assisted remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Streamcast 0.9.75 - HTTP User-Agent Buffer Overflow (Metasploit)
Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or
50RIESGO
abrir ↗Exploit-DB
DaLogin - Multiple Vulnerabilities
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe InDesign CS3 - '.INDD' Handling Buffer Overflow
Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nginx 0.8.36 - Source Disclosure / Denial of Service
nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nginx 0.8.36 - Source Disclosure / Denial of Service
nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequen
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nginx 0.7.65/0.8.39 (dev) - Source Disclosure / Download
nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sygate Personal Firewall 5.6 build 2808 - ActiveX with DEP Bypass
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AneCMS 1.x - '/modules/blog/index.php' HTML Injection
Cross-site scripting (XSS) vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote
23RIESGO
abrir ↗Exploit-DB
ardeacore 2.2 - Remote File Inclusion
PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Arab Portal 2.2 - 'members.php' SQL Injection
SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attacker
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.