Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.151exploits catalogados
35.370CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
Sorinara Streaming Audio Player 0.9 - '.m3u' Local Stack Overflow
Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IceWarp Merak Mail Server 9.4.1 - 'Forgot Password' Input Validation
CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and Web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Winn ASP Guestbook 1.01b - Remote Database Disclosure
Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Openfire 3.x - jabber:iq:auth 'passwd_change' Remote Password Change
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authentic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Acrobat Reader 8.1.2 < 9.0 - 'getIcon()' Memory Corruption
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows r
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 10 / OpenSolaris - 'dtrace' Local Kernel Denial of Service (PoC)
Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bmxplay 0.4.4b - '.bmx' Local Buffer Overflow (PoC)
Buffer overflow in BrotherSoft BMXPlay 0.4.4b allows remote attackers to cause a denial of service (application crash) o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EW-MusicPlayer 0.8 - '.m3u' Local Buffer Overflow (PoC)
Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service (appl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GUPnP 0.12.7 - Message Handling Denial of Service
GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control m
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x (Sparc64) - '/proc/iomem' Local Denial of Service
The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on the sparc6
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury Audio Player 1.21 - '.m3u' Local Stack Overflow
Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long st
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MiniTwitter 0.2b - Remote User Options Changer
index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Beatport Player 1.0.0.283 - '.m3u' Local Stack Overflow (3)
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Beatport Player 1.0.0.283 - '.m3u' Local Overwrite (SEH)
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RM Downloader - '.smi' Universal Local Buffer Overflow
Stack-based buffer overflow in Mini-stream RM Downloader allows remote attackers to execute arbitrary code via a long st
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Beatport Player 1.0.0.283 - '.m3u' Local Buffer Overflow (PoC)
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Beatport Player 1.0.0.283 - '.m3u' Local Stack Overflow (2)
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Addonics NAS Adapter FTP - Remote Denial of Service
Multiple buffer overflows in the FTP server on the Addonics NAS Adapter NASU2FW41 with loader 1.17 allow remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MiniTwitter 0.2b - Multiple SQL Injections
Multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, when magic_quotes_gpc is disabled, allow remote authenti
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury Audio Player 1.21 - '.b4s' Local Stack Overflow
Multiple stack-based buffer overflows in Mercury Audio Player 1.21 allow remote attackers to execute arbitrary code via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury Audio Player 1.21 - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mercury Audio Player 1.21 allows remote attackers to execute arbitrary code via a long st
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GnuTLS 2.6.x - libgnutls lib/gnutls_pk.c DSA Key Storage Remote Spoofing
lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GnuTLS 2.6.x - libgnutls lib/pk-libgcrypt.c Malformed DSA Key Handling Remote Denial of Service
lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Coppermine Photo Gallery 1.4.21 - 'css' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Fax Viewer Control 10 - 'DCCFAXVW.dll' Remote Buffer Overflow
Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\DCCFAXVW.DLL in Symantec WinFax
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
mpegable Player 2.12 - '.yuv' Local Stack Overflow (PoC)
Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service (applicat
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MIM: InfiniX 1.2.003 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec (Multiple Products) - Intel Common Base Agent Remote Command Execution
The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Cente
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.20/2.6.24/2.6.27_7-10 (Ubuntu 7.04/8.04/8.10 / Fedora Core 10 / OpenSuse 11.1) - SCTP FWD Memory Corruption Remote Overflow
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linu
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SDP Downloader 2.3.0 - '.asx' Local Buffer Overflow (SEH) (2)
Stack-based buffer overflow in Streaming Download Project (SDP) Downloader 2.3.0 allows remote attackers to execute arbi
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.