Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.020exploits catalogados
35.276CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8604Nuclei 4251Metasploit 3473✓ solo verificadosrecientespopularesriesgo
24.446 exploits
Exploit-DB
PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL Injection
SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
webMathematica 3 - 'MSP' Script Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP2) - Local Buffer Overflow
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which rev
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail actio
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP3) - Local Overflow
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
weenCompany - SQL Injection
SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini File Host 1.5 - Arbitrary File Upload
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by upload
23RIESGO
abrir ↗Exploit-DB
Simple PHP Blog 0.5.1 - Local File Inclusion
Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Active PHP BookMarks 1.3 - SQL Injection
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CoolPlayer 2.18 - M3U Playlist Buffer Overflow
Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Active Business Directory 2 - 'searchadvance.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB
Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - Denial of Service
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Uploader 2.0 - File Disclosure
Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to rea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPhotoalbum - Arbitrary File Upload
Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPhotoalbum 0.5 - SQL Injection
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kasseler CMS 1.3.4 Lite - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Angelo-emlak 1.0 - Database Disclosure
Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ultimate Uploader 1.3 - Arbitrary File Upload
Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB
VideoCMS 3.1 - SQL Injection
SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Calendar 1.1 - 'update10.php?configfile' Traversal Local File Inclusion
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Calendar 1.1 - 'update08.php?configfile' Traversal Local File Inclusion
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simplicity oF Upload 1.3.2 - Arbitrary File Upload
Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phUploader 2 - Arbitrary File Upload
Unrestricted file upload vulnerability in phUploader.php in phphq.Net phUploader 1.2 allows remote attackers to upload a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ignition 1.2 - Multiple Local File Inclusions
Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
8Pixel.net 2009. - Database Disclosure
8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
4Images 1.7.1 - SQL Injection
SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.12/5.3.1 - 'symlink()' open_basedir Bypass
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restrictio
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.