Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.058exploits catalogados
35.300CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8607Nuclei 4255Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
DreamPoll 3.1 - SQL Injection
Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
httpdx 1.4 - GET Buffer Overflow
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote at
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 6.4 - 'pipeclose()'/'knlist_cleardel()' Race Condition
Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Riorey RIOS 4.7.0 - Hard-Coded Password
RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DreamPoll 3.1 - SQL Injection
Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VMware Player / VMware Workstation 6.5.3 - 'VMware-authd' Remote Denial of Service
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 befor
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.4.001 - Remote File Inclusion
PHP remote file inclusion vulnerability in public/code/cp_html2xhtmlbasic.php in All In One Control Panel (AIOCP) 1.4.00
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP LaserJet Printers - Multiple Persistent Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BulletProof FTP Client 2.63 b56 - '.bps' File Stack Buffer Overflow
Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bp
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dopewars Server 1.5.12 - Denial of Service
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
e-Courier CMS - 'UserGUID' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
X-Cart Email Subscription - 'email' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Informix Client SDK 3.0 - '.nfx' File Integer Overflow
Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Run
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component CB Resume Builder - SQL Injection
SQL injection vulnerability in the JoomlaCache CB Resume Builder (com_cbresumebuilder) component for Joomla! allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Empire CMS 47 - SQL Injection
SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid para
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alleycode 2.21 - Local Overflow (SEH)
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alleycode 2.21 - Local Overflow (SEH)
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Soundset 1.0 - SQL Injection
SQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hyperic HQ 3.2 < 4.2-beta1 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities
Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Capt
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AOL 9.1 SuperBuddy - ActiveX Control Remote code Execution
Use-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online (AOL) 9.5.0.1 allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Installation Manager 1.3.0 - 'iim://' URI handler
Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kaspersky AV 2010 9.0.0.463 - Local Denial of Service
kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Interspire Knowledge Manager 5 - 'p' Directory Traversal
Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP LoadRunner 9.5 - Remote file creation (PoC)
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, whi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HEAT Call Logging 8.01 - SQL Injection
Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to exe
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.