Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
DbbS 2.0 - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tiny Web Gallery 1.4 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit)
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPAlbum 0.2.2/0.2.3/4.1 - 'Language.php' File Inclusion
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Papoo 2.1.x - 'print.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Farsinews 2.1/2.5 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AR-Blog 5.2 - 'print.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MODx CMS 0.9.1 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. (d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Document Server 6.0 Extensions - 'ads-readerext?actionID' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LifeType 1.0.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 8.52 - Stylesheet Attribute Buffer Overflow
Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a sty
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SimpleBBS 1.0.6/1.0.7/1.1 - Arbitrary Command Execution
Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PowerClan 1.14 - 'member.php' SQL Injection
SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PlanetSearch + - 'Planetsearchplus.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W3C Amaya 9.4 - legend color Attribute Value Overflow
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W3C Amaya 9.4 - textarea rows Attribute Value Overflow
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Document Server 6.0 Extensions - 'AlterCast?op' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Plone 2.x - MembershipTool Access Control Bypass
Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PatroNet CMS - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in PatroNet CMS allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Interaktiv.shop 4/5 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Guestbook 1.3 - 'index.php' SQL Injection
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Clever Copy 3.0 - 'Connect.INC' Information Disclosure
Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JetPhoto 1.0/2.0/2.1 - 'Slideshow.php?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simplog 0.9.2 - 's' Remote Command Execution
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JetPhoto 1.0/2.0/2.1 - 'thumbnail.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft FrontPage - Server Extensions Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tritanium Bulletin Board 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKIT 1.6.1 R2 - 'Include.php' SQL Injection
SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SWSoft Confixx 3.0.6/3.0.8/3.1.2 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute ar
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.