Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
Sendmail 8.12.x - 'X-header' Remote Heap Buffer Overflow (PoC)
Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash)
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode U
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
COWON America jetCast 2.0.4.1109 - '.mp3' Local Overflow
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
roomphplanning 1.6 - Multiple Vulnerabilities
Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by set
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mole Adult Portal Script - 'profile.php?user_id' SQL Injection
SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
COWON America jetCast 2.0.4.1109 - '.mp3' Local Overflow
Stack-based buffer overflow in JetCast.exe 2.0.4.1109 in jetAudio 7.5.2 and 7.5.3.15 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cute Editor ASP.NET - Remote File Disclosure
Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aardvark Topsites PHP 5.2 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Webradev Download Protect 1.0 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
roomphplanning 1.6 - Multiple Vulnerabilities
admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mole Adult Portal Script - 'profile.php?user_id' SQL Injection
SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Lytebox - 'wp-lytebox' Local File Inclusion
Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to incl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebMember 1.0 - 'formID' SQL Injection
SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BSD (Multiple Distributions) - 'gdtoa/misc.c' Memory Corruption
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Boy Scout Advancement 0.3 - 'id' SQL Injection
SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
roomphplanning 1.6 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Intergo Arcade Trade Script 1.0 - 'q' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco ASA Appliance 8.x - WebVPN DOM Wrapper Cross-Site Scripting
Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Ap
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mole Group Restaurant Directory Script 3.0 - Change Admin Password
admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mole Group Sky Hunter/Bus Ticket Scripts - Change Admin Password
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to cha
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tutorial Share 3.5.0 - Insecure Cookie Handling
Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain administ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection
statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in t
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BaoFeng - 'config.dll' ActiveX Remote Code Execution
Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ChinaGames - 'CGAgent.dll' ActiveX Remote Code Execution
Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LibTIFF 3.8.2 - 'LZWDecodeCompat()' Remote Buffer Underflow
Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
asp inline Corporate Calendar - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VICIDIAL 2.0.5-173 - Authentication Bypass
Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Article Directory - 'page.php' Blind SQL Injection
SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.