Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
80.790exploits catalogados
37.482CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 23.901GitHub PoC 15.414VulnCheck XDB 9065Nuclei 4426Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - SCSI ProcFS Denial of Service
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zebedee 2.4.1 - Remote Denial of Service
Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (applica
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'print.php?id' SQL Injection
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'news.php' Multiple SQL Injections
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'startup.php' Cookie SQL Injection
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PBLang 4.65 Bulletin Board System - 'SetCookie.php' Directory Traversal
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 12.x - Firewall Authentication Proxy Buffer Overflow
Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 an
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - CSRSS Privilege Escalation (MS05-018)
Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000,
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MAXdev MD-Pro 1.0.73 - Arbitrary File Upload
The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dan
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.5.3 - 'Description' HTML Injection
Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BNBT BitTorrent EasyTracker 7.7r3 - Denial of Service
The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to ca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
man2web 0.88 - Multiple Remote Command Executions (2)
man2web allows remote attackers to execute arbitrary commands via -P arguments.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Free SMTP Server 2.2 - Spam Filter
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WhitSoft Development SlimFTPd 3.17 - Remote Denial of Service
SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, p
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Frox 0.7.18 - Arbitrary Configuration File Access
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which cou
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indiatimes Messenger 6.0 - Remote Buffer Overflow
Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (applic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DameWare Mini Remote Control 4.0 < 4.9 - Client Agent Remote Overflow
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary c
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FlatNuke 2.5.6 - 'ID' Directory Traversal
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS Made Simple 0.10 - 'Lang.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FlatNuke 2.5.6 - 'USR' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager 7.50 - Remote Command Execution
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metach
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpLDAPadmin 0.9.6/0.9.7 - 'welcome.php' Arbitrary File Inclusion
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitra
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with V
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gopher 3.0.9 - '+VIEWS' Client-Side Buffer Overflow
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to e
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Version Cue 1.0/1.0.1 (OSX) - Local Privilege Escalation
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with V
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 - Remote Buffer Overflow (2)
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP G
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.