Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.298exploits catalogados
35.468CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.301GitHub PoC 14.137VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
Maxthon Browser 1.x - Content-Type Buffer Overflow
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a l
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Qbik WinGate 6.2.2 - 'LIST' Remote Denial of Service
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenVms 8.3 Finger Service - Stack Buffer Overflow
Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice - 'search.asp?Filename' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Battle.net Clan Script 1.5.x - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions
Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disab
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Kleinanzeigen Module - 'lid' SQL Injection
SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice - 'order.asp?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKF-Portal 1.10 - 'anket_yonetim.php?portal_ayarlarportal_dili' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service
The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (da
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKF-Portal 1.10 - 'baslik.php?tema_dizin' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Crafty Syntax Live Help 2.14.6 - 'livehelp_js.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
8E6 Technologies R3000 - Host Header Internet Filter Security Bypass
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host heade
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
POWERGAP ShopSystem - 's03.php' SQL Injection
SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'adminhome.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'browsecats.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pluck CMS 4.5.2 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'suggest_image.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'image_desc.php?latest' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'changepassword.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'cleanup.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'config.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Meeting Room Booking System (MRBS) 1.2.6 - 'search.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Homes 4 Sale - 'results.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Meeting Room Booking System (MRBS) 1.2.6 - 'report.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pcshey Portal - 'kategori.asp' SQL Injection
SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Meeting Room Booking System (MRBS) 1.2.6 - 'month.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers t
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.