Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
Swinger Club Portal - 'start.php?go' Remote File Inclusion
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tausch Ticket Script 3 - 'suchauftraege_user.php?userid' SQL Injection
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Swinger Club Portal - 'start.php?id' SQL Injection
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rentventory - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tausch Ticket Script 3 - 'vote.php?descr' SQL Injection
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP Multiple LaserJet Printer - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rentventory - Multiple SQL Injections
SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sourcefire 3D Sensor & Defense Center 4.8.x - Privilege Escalation
The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authentica
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - 'albumID' SQL Injection
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PEamp 1.02b - '.m3u' Local Buffer Overflow (PoC)
Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure
The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MP3-Nator 2.0 - '.plf' Universal Buffer Overflow (SEH)
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - GET Remote Denial of Service
The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection
SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1)
Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Profession
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyBlockchecker 1.0.0055 - Insecure Cookie Handling
admin.php in phpMyBlockchecker 1.0.0055 allows remote attackers to bypass authentication and gain administrative access
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.