Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
80.324exploits catalogados
37.130CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9001Nuclei 4401Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/specials.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/languages.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/countries.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JAF CMS 4.0 RC1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Static Topics 1.0 - 'phpbb_root_path' File Inclusion
PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/currencies.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/banner_manager.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/stats_products_viewed.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/orders_status.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/banner_statistics.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/tax_classes.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGreetz 0.99 - 'footer.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/newsletters.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/zones.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
osCommerce 2.2 - '/admin/stats_products_purchased.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Motorola SB4200 - Remote Denial of Service
The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (de
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JAF CMS 4.0 RC1 - 'forum.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Digishop 4.0 - 'cart.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Web Scripts Easy Banner - 'functions.php' Remote File Inclusion
PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.09 - 'Sig.php' Remote File Inclusion
PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
McAfee ePo 3.5.0 / ProtectionPilot 1.1.0 - Source Remote (Metasploit)
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attac
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10.8.x - cpwrap via MySQLAdmin Privilege Escalation
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspe
41RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yblog - 'uss.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyWebmin 1.0 - 'target' Remote File Inclusion
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yblog - 'tem.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yblog - 'funk.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyWebmin 1.0 - 'target' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - WebViewFolderIcon setSlice() (1)
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.