Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.231exploits catalogados
35.420CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8635Nuclei 4274Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
ZoneAlarm 8.0.20 - HTTP Proxy Remote Denial of Service
TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WinFTP Server 2.3.0 - 'NLST' Denial of Service
WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of se
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ICONICS Vessel / Gauge / Switch 8.02.140 - ActiveX Buffer Overflow (Metasploit)
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenNMS 1.5.x - 'j_username' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasyRealtorPRO 2008 - 'site_search.php' Multiple SQL Injections
SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenNMS 1.5.x - 'filter' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flatpress 0.804 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenNMS 1.5.x - 'Username' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rianxosencabos CMS 0.9 - Remote Add Admin
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Datalife Engine CMS 7.2 - 'admin.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Omnicom Content Platform - 'browser.asp' Directory Traversal
Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
xt:Commerce 3.04 - 'XTCsid' Session Fixation
Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
6rbScript - 'cat.php' SQL Injection
SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the Ca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
xt:Commerce 3.04 - 'advanced_search_result.php?keywords' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and earlier allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MapCal 0.1 - 'id' SQL Injection
SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Foxmail Email Client 6.5 - 'mailto' Buffer Overflow (PoC)
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fuzzylime (cms) 3.0 - 'usercheck.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BLUEPAGE CMS 2.5 - 'PHPSESSID' Session Fixation
Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TWiki 4.2.2 - 'action' Remote Code Execution
Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlueCUBE CMS - 'tienda.php' SQL Injection
SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eXtrovert software Thyme 1.3 - 'add_calendars.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DESlock+ < 3.2.7 - Local Kernel Overflow (PoC)
Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kerne
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Vendor FTP Server - Long Command Handling Security
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands fro
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DESlock+ < 3.2.7 - Local Kernel Race Condition Denial of Service (PoC)
DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Achievo 1.3.2 - 'atknodetype' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in dispatch.php in Achievo 1.3.2 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HyperStop WebHost Directory 1.2 - Database Disclosure
HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Pro Bid 5.2.4/6.04 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Cart 3.1 - 'admin.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.