Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.302exploits catalogados
35.469CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8646Nuclei 4289Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
PEGames - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Perl - 'rmtree()' Function Local Insecure Permissions
The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, whic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_edit_submenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'cat.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'members.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'photos.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HoMaP-CMS 0.1 - 'plugin_admin.php' Remote File Inclusion
PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NASM 2.0 - 'ppscan()' Off-by-One Buffer Overflow
Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteXS CMS 0.1.1 - Arbitrary File Upload / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Diigo Toolbar and Diigolet Comment Feature - HTML Injection / Information Disclosure
Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Classic FTP 1.02 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP serve
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WISE-FTP 4.1/5.5.8 - FTP Client 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to crea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure
SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not proper
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.6 - 'chdir()' Function http URL Argument Safe_mode Restriction Bypass
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_m
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Screen 4.0.3 (OpenBSD) - Local Authentication Bypass
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenDocMan 1.x - 'out.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption
Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UltraEdit 14.00b - FTP/SFTP 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/externalResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Crysis 1.21 - HTTP/XML-RPC Service Remote Denial of Service
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsConnectionNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsDestinationNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.