Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
asp inline Corporate Calendar - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ChinaGames - 'CGAgent.dll' ActiveX Remote Code Execution
Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LibTIFF 3.8.2 - 'LZWDecodeCompat()' Remote Buffer Underflow
Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VICIDIAL 2.0.5-173 - Authentication Bypass
Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flash Quiz Beta 2 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DMXReady Registration Manager 1.1 - Arbitrary File Upload
Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXRea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX - Java applet Remote Deserialization Remote (2)
The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; a
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Profense 2.2.20/2.4.2 - Web Application Firewall Security Bypass
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "neg
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java System Communications Express 6.3 - 'search.xml' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Casino 0.3.1 - Multiple SQL Injections s
SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java System Communications Express 6.3 - 'UWCMain' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution
The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a syml
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit - 'parent/top' Cross Domain Scripting
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.33.6 - 'CMD_REDIRECT' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.3.5 - Format String / Security Bypass
Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL 0.9.8k/1.0.0-beta2 - DTLS Remote Memory Exhaustion Denial of Service
Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (2)
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the cal
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (3)
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the cal
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (1)
The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the cal
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Irssi 0.8.13 - 'WALLOPS' Message Off-by-One Heap Memory Corruption
Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lussumo Vanilla 1.1.5/1.1.7 - 'updatecheck.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Webmedia Explorer 5.0.9/5.10 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (1)
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ascad Networks 5 - Products Insecure Cookie Handling
Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative acce
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x (Gentoo 2.6.29rc1) - 'ptrace_attach' Local Privilege Escalation
Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPsec-Tools < 0.7.2 (racoon frag-isakmp) - Multiple Remote Denial of Service Vulnerabilities (PoC)
racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafte
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CastRipper 2.50.70 - '.m3u' Local Buffer Overflow
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CastRipper 2.50.70 - '.m3u' Universal Stack Overflow
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CastRipper 2.50.70 - '.pls' Universal Stack Overflow
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.