Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
Linux Kernel 2.x (RedHat) - 'sock_sendpage()' Ring0 Privilege Escalation (1)
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DS CMS 1.0 - 'nFileId' SQL Injection
SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Elkagroup Elkapax - 'q' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
tgs CMS 0.x - Cross-Site Scripting / SQL Injection / File Disclosure
Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
tgs CMS 0.x - Cross-Site Scripting / SQL Injection / File Disclosure
Cross-site scripting (XSS) vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gazelle CMS 1.0 - Arbitrary File Upload
Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
pIPL 2.5.0 - '.PLS' / '.PL' Universal Local Buffer (SEH)
Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attacke
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Plume CMS 1.2.3 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow (1) remote authenticated users to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user param
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (3)
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (2)
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.8.3 - Remote Admin Reset Password
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OCS Inventory NG 1.2.1 - 'systemid' SQL Injection
SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component idoblog 1.1b30 (com_idoblog) - SQL Injection
SQL injection vulnerability in the IDoBlog (com_idoblog) component 1.1 build 30 for Joomla! allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2003 - '.EOT' Blue Screen of Death Crash
win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by r
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (1)
Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit - Floating Point Number Remote Buffer Overflow
Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a deni
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ViArt Helpdesk - 'forum.php?forum_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.10/5.3 - 'ini_restore()' Memory Information Disclosure (2)
The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ViArt Helpdesk - 'article.php?category_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ViArt Helpdesk - 'product_details.php?category_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ViArt Helpdesk - 'products_search.php?search_category_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ViArt Helpdesk - 'products.php?category_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ViArt CMS - 'forum_topic_new.php?forum_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-CMS 1.0.1 - 'page.php' SQL Injection
SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TurnkeyForms Yahoo Answers Clone - 'questiondetail.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.