Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
sBlog 0.7.2 - 'search.php?keyword' POST Method Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ADP Forum 2.0.x - 'Subject' HTML Injection
Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'delcomment.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
sBlog 0.7.2 - 'comments_do.php' Multiple POST Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
d2kBlog 1.0.3 - 'memName' SQL Injection
SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'deluser.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x/6.x - 'inbox.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'trackback_url' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JiRos Banner Experience 1.0 - Unauthorized Create Admin
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x/6.x - 'forums.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Light Weight Calendar 1.x - 'date' Remote Code Execution
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'edituser.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'upload.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x/6.x - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UnrealIRCd 3.x - Remote Denial of Service
UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send ma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x/6.x - 'lostpassword.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x/6.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x/6.x - 'mycontents.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy File Sharing Web Server 3.2 - Format String Denial of Service
Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of servi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'delcat.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy File Sharing Web Server 3.2 - Full Path Request Arbitrary File Upload
Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'addcat.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'editcat.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'del.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.2/2.1.3 - 'adduser.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedBLoG 0.5 - 'cat_id' SQL Injection
SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TextFileBB 1.0 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PeerCast 0.1216 - Remote Stack Overflow (Metasploit)
Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow rem
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.41 - 'podcast.php' SQL Injection
SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RevilloC MailServer 1.21 - 'USER' Remote Buffer Overflow
Buffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute arbitrary code via a long USER
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.