Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Boonex Dolphin 6.1.2 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fuzzylime (cms) 3.01 - 'blog.php' Local File Inclusion
Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DodosMail 2.5 - 'dodosmail.php' Local File Inclusion
Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zoph 0.7.2.1 - SQL Injection
SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified ve
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zoph 0.7.2.1 - 'search.php?_off' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 4ndvddb 0.91 Module - 'id' SQL Injection
SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell meta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Messenger 2.0 Client - Buffer Overflow
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileg
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdTag' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FaName 1.0 - 'page.php?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FaName 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 1.0.0 - Multiple Denial of Service Vulnerabilities
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (applic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Directory Server 6.1.x - Adding 'ibm-globalAdminGroup' Entry Denial of Service
Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated admi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - Authentication Bypass
RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdFlux' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AceFTP 3.80.3 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass
Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location propert
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location propert
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNOME Rhythmbox 0.11.5 - '.Playlist' File Denial of Service
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlis
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle.php?id' SQL Injection
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' SQL Injection
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UUSee 2008 - UUUpgrade ActiveX Control 'Update' Method Arbitrary File Download
Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
5th street - 'dx8render.dll' Format String
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Ste
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1)
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.