Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.060exploits catalogados
35.302CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8607Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
EMO Breader Manager - 'video.php?movie' SQL Injection
SQL injection vulnerability in video.php in EMO Breeder Manager (aka EMO Breader Manager) allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_siirler 1.2 - 'sid' SQL Injection
SQL injection vulnerability in the Q-Proje Siirler Bileseni (com_siirler) component 1.2 RC for Joomla! allows remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling
Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Audacity 1.2 - '.gro' Universal Buffer Overflow (Egghunter)
Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacit
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fat Player 0.6b - '.wav' Universal Local Buffer
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
New5starRating 1.0 - 'rating.php' SQL Injection
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Uebimiau Webmail 3.2.0-2.0 - Arbitrary Database Disclosure
Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Dir Submit - 'aid' SQL Injection
SQL injection vulnerability in index.php in PHP Dir Submit (aka WebsiteSubmitter or Submitter Script) allows remote auth
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Faslo Player 7.0 - '.m3u' Local Buffer Overflow (PoC)
Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanai Core 0.6 - Remote File Disclosure / Info Disclosure
Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which calls
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Photodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH)
Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Radvision Scopia - '/entry/index.jsp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_ninjamonial 1.1 - 'testimID' SQL Injection
SQL injection vulnerability in the NinjaMonials (com_ninjacentral) component 1.1.0 for Joomla! allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Photodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH)
Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Photodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH)
telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a mo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Moa Gallery 1.1.0 - 'gallery_id' SQL Injection
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_jtips 1.0.x - 'season' Blind SQL Injection
SQL injection vulnerability in the jTips (com_jtips) component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cuteflow 2.10.3 - 'edituser.php' Security Bypass
CuteFlow 2.10.3 and 2.11.0_c does not properly restrict access to pages/edituser.php, which allows remote attackers to m
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4/2.6 (RedHat Linux 9 / Fedora Core 4 < 11 / Whitebox 4 / CentOS 4) - 'sock_sendpage()' Ring0 Privilege Escalation (5)
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KSP 2006 FINAL - '.m3u' Universal Local Buffer (SEH)
Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ITechBids 8.0 - 'ProductID' Blind SQL Injection
Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HotScripts Type PHP Clone Script - 'feedback.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Paypal Shopping Cart Script - 'index.php?cid' SQL Injection
SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HotScripts Type PHP Clone Script - 'lostpassword.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HotScripts Type PHP Clone Script - 'index.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Paypal Shopping Cart Script - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EZArticles - 'articles.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in articles.php in EDGEPHP EZArticles allows remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Scripts Now Riddles - '/riddles/results.php?searchQuery' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Scripts Now Riddles - '/riddles/list.php?catid' SQL Injection
SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'drivers/char/tty_ldisc.c' Null Pointer Dereference Denial of Service
The tty_ldisc_hangup function in drivers/char/tty_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local u
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.