Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.226exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.126VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
Malleo 1.2.3 - 'admin.php' Local File Inclusion
Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebGlimpse 2.18.7 - 'DOC' Directory Traversal
Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbit
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlackBerry Enterprise Server 4.0/4.1 - MDS Connection Service Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Geronimo 2.1.x - Cross-Site Request Forgery (Multiple Admin Function)
Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Applicat
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DNS Tools (PHP Digger) - Remote Command Execution
dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RazorCMS 0.3RC2 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Geronimo 2.1.x - '/console/portal/Server/Monitoring' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Ser
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
chCounter 3.1.3 - Authentication Bypass
SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Geronimo 2.1.x - '/console/portal/' URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Ser
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MagicISO CCD/Cue - Local Heap Overflow (PoC)
Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Teaming 1.0 - User Enumeration / Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeWebShop.org 2.2.9 RC2 - 'lang_file' Local File Inclusion
Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals is
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/Vista/2003/2008 - WMI Service Isolation Privilege Escalation
The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vist
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenBSD 4.5 - IP datagram Null Pointer Deref Denial of Service
The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirO
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Continuous Data Protection for Files 3.1.4.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection (CDP) for
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2003 - RPCSS Service Isolation Privilege Escalation
The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 Converter - Universal Stack Overflow
Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Vista/2008 - Thread Pool ACL Privilege Escalation
The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASX to MP3 Converter - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary cod
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RM Downloader - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary cod
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long U
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASX to MP3 Converter - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASX to MP3 Converter - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary cod
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RM Downloader - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long U
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RM Downloader - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.