Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
Alien Arena 2006 Gold Edition 5.00 - Multiple Vulnerabilities
The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain lo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.41 - 'backend_settings.php' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution (Metasploit)
The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.41 - 'index.php?template' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Link Bank - 'Iframe.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.41 - 'podcast.php' SQL Injection
SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alien Arena 2006 Gold Edition 5.00 - Multiple Vulnerabilities
Stack-based buffer overflow in the Cmd_Say_f function in g_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 2.1.5 - showtopic SQL Injection
SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sauerbraten 2006_02_28 - Multiple Buffer Overflow / Crash
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Monopd 0.9.3 - Remote Denial of Service
server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a strin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Game-Panel 2.6 - 'login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RunCMS 1.x - 'Bigshow.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted pa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DVGuestbook 1.0/1.2.2 - 'index.php?page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sauerbraten 2006_02_28 - Multiple Buffer Overflow / Crash
Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MPCS 0.2 - 'comment.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HitHost 1.0 - 'viewuser.php?hits' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sauerbraten 2006_02_28 - Multiple Buffer Overflow / Crash
engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHORUM 3.x/5.x - 'Common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sauerbraten 2006_02_28 - Multiple Buffer Overflow / Crash
Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cube
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cube 2005_08_29 - Multiple Buffer Overflow / Crash
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DVGuestbook 1.0/1.2.2 - 'dv_gbook.php?f' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in dv_gbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HitHost 1.0 - 'deleteuser.php?user' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.1/1.2 - 'Title' HTML Injection
Cross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Visual Studio 6.0 sp6 - '.dbp' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attack
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LibTiff 3.7.1 - BitsPerSample Tag Local Buffer Overflow
Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file wi
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Forum 2.5 - New User Image File HTML Injection
Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VBZooM Forum 1.11 - 'comment.php?UserID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 2.3.4 - 'misc.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VBZoom Forum 1.11 - 'show.php' MainID SQL Injection
SQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.