Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.647exploits catalogados
34.986CVEs con explotación pública
24.695probados en laboratorio
24.443 exploits
Exploit-DBVexDay Proof
TrackerCam - PHP Argument Buffer Overflow (Metasploit)
CVE-2005-0478remotewindows09 may 2010
Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibl
50RIESGO
abrir
Exploit-DBVexDay Proof
GoodTech Telnet Server 5.0.6 - Remote Buffer Overflow (Metasploit)
CVE-2005-0768remotewindows09 may 2010
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions befor
50RIESGO
abrir
Exploit-DBVexDay Proof
Apple QuickTime 7.3 - RTSP Response Header Buffer Overflow (Metasploit)
CVE-2007-6166remotewindows09 may 2010
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac
50RIESGO
abrir
Exploit-DBVexDay Proof
CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (1)
CVE-2007-0449remotewindows09 may 2010
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1
60RIESGO
abrir
Exploit-DBVexDay Proof
Novell NetWare - LSASS CIFS.NLM Driver Stack Buffer Overflow (Metasploit)
CVE-2005-2852remotenetware09 may 2010
Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a den
50RIESGO
abrir
Exploit-DBVexDay Proof
Bopup Communications Server - Remote Buffer Overflow (Metasploit)
CVE-2009-2227remotewindows09 may 2010
Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrar
50RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Windows Media Encoder 9 - 'wmex.dll' ActiveX Buffer Overflow (MS08-053) (Metasploit)
CVE-2008-3008remotewindows09 may 2010
Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9
50RIESGO
abrir
Exploit-DBVexDay Proof
PSOProxy 0.91 - Stack Buffer Overflow (Metasploit)
CVE-2004-0313doswindows09 may 2010
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir
Exploit-DBVexDay Proof
Trend Micro OfficeScan - Remote Stack Buffer Overflow (Metasploit)
CVE-2008-1365remotewindows09 may 2010
Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patc
50RIESGO
abrir
Exploit-DBVexDay Proof
Now SMS/Mms Gateway - Remote Buffer Overflow (Metasploit)
CVE-2008-0871remotewindows09 may 2010
Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar
50RIESGO
abrir
Exploit-DBVexDay Proof
Macrovision Installshield Update Service - Remote Buffer Overflow (Metasploit)
CVE-2007-5660remotewindows09 may 2010
Unspecified vulnerability in the Update Service ActiveX control in isusweb.dll before 6.0.100.65101 in MacroVision FLEXn
50RIESGO
abrir
Exploit-DBVexDay Proof
Juniper SSL-VPN IVE - 'JuniperSetupDLL.dll' ActiveX Control Buffer Overflow (Metasploit)
CVE-2006-2086remotewindows09 may 2010
Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Juni
50RIESGO
abrir
Exploit-DBVexDay Proof
Symantec BackupExec Calendar Control - Remote Buffer Overflow (Metasploit)
CVE-2007-6016remotewindows09 may 2010
Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the schedul
50RIESGO
abrir
Exploit-DBVexDay Proof
3Com TFTP Service (3CTftpSvc) - 'Mode' Remote Buffer Overflow (Metasploit)
CVE-2006-6183remotewindows09 may 2010
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Services - 'nwwks.dll' (MS06-066) (Metasploit)
CVE-2006-4688remotewindows09 may 2010
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 al
60RIESGO
abrir
Exploit-DBVexDay Proof
mIRC - IRC URL Buffer Overflow (Metasploit)
CVE-2003-1336remotewindows09 may 2010
Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.
50RIESGO
abrir
Exploit-DBVexDay Proof
GOM Player - ActiveX Control Buffer Overflow (Metasploit)
CVE-2007-5779remotewindows09 may 2010
Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Playe
60RIESGO
abrir
Exploit-DBVexDay Proof
RealPlayer - 'ierpplug.dll' ActiveX Control Playlist Name Buffer Overflow (Metasploit)
CVE-2007-5601remotewindows09 may 2010
Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and e
50RIESGO
abrir
Exploit-DBVexDay Proof
HP LoadRunner 9.0 - ActiveX AddFolder Buffer Overflow (Metasploit)
CVE-2007-6530remotewindows09 may 2010
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions befo
50RIESGO
abrir
Exploit-DBVexDay Proof
Novell iPrint Client - ActiveX Control target-frame Buffer Overflow (Metasploit)
CVE-2009-1568remotewindows09 may 2010
Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows
50RIESGO
abrir
Exploit-DBVexDay Proof
TFTPGUI 1.4.5 - Long Transport Mode Overflow Denial of Service (Metasploit)
CVE-2010-2028doswindows08 may 2010
Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service
28RIESGO
abrir
Exploit-DBVexDay Proof
Web 2.0 Social Network Freunde Community System - 'user.php' SQL Injection
CVE-2010-1923webappsphp08 may 2010
SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remot
23RIESGO
abrir
Exploit-DBVexDay Proof
gdomap - Multiple Local Information Disclosure Vulnerabilities
CVE-2010-1457locallinux07 may 2010
Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a
23RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - SMB2 Negotiate Protocol '0x72' Response Denial of Service
CVE-2009-3103doswindows07 may 2010
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RIESGO
abrir
Exploit-DBVexDay Proof
Consona - 'n6plugindestructor.asp' Cross-Site Scripting
CVE-2010-1905webappsasp07 may 2010
Multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance
23RIESGO
abrir
Exploit-DBVexDay Proof
Microsoft Paint - Integer Overflow (Denial of Service) (MS10-005)
CVE-2010-0028doswindows06 may 2010
Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to
35RIESGO
abrir
Exploit-DBVexDay Proof
DeluxeBB 1.x - 'newpost.php' SQL Injection
CVE-2010-1859webappsphp06 may 2010
SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote
23RIESGO
abrir
Exploit-DB
OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass
CVE-2009-1443webappsphp06 may 2010
Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and att
23RIESGO
abrir
Exploit-DBVexDay Proof
VMware View 3.1.x - URL Processing Cross-Site Scripting
CVE-2010-1143remotemultiple05 may 2010
Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 bui
23RIESGO
abrir
Exploit-DB
PHP-Nuke 7.0/8.1/8.1.35 - Wormable Remote Code Execution
CVE-2004-1315webappsphp05 may 2010
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrase
60RIESGO
abrir
anteriorpágina 379 / 815siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.