Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.444exploits catalogados
35.552CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.223VulnCheck XDB 8646Nuclei 4283Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component Filebase - 'filecatid' SQL Injection
SQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.8.4 - 'main/inc/lib/events.lib.inc.php' Referer HTTP Header SQL Injection
Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.8.4 - '/main/create_course/add_course.php?tutor_name' SQL Injection
Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.8.4 - '/main/mySpace/index.php?tracking_list_coaches_column' SQL Injection
Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Emai
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sami FTP Server 2.0.x - Multiple Commands Remote Denial of Service Vulnerabilities
KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component com_scheduling - 'id' SQL Injection
SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.8.4 - '/main/calendar/myagenda.php?courseCode' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.8.4 - '/main/admin/course_category.php?category' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.8.4 - '/main/admin/session_list.php?cmessage' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component com_sg - 'pid' SQL Injection
SQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.8.4 - 'whoisonline.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component com_salesrep - 'rid' SQL Injection
SQL injection vulnerability in the com_salesrep component for Joomla! and Mambo allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PlutoStatus Locator 1.0pre alpha - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Unified Communications Manager 6.1 - 'key' SQL Injection
SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Site2Nite Real Estate Web - 'agentlist.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office 2003 - '.wps' Local Stack Overflow (MS08-011)
Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote att
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office 2003 - '.wps' Local Stack Overflow (MS08-011)
wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows re
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WinIPDS 3.3 rev. G52-33-021 - Directory Traversal / Denial of Service
Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7 - 'graph_view.php?graph_list' SQL Injection
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated u
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7 - 'graph_view.php?filter' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7 - 'graph.php?view_type' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Counter Strike Portals - 'download' SQL Injection
SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7 - 'tree.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated u
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7 - '/index.php/sql.php?Login Action login_username' SQL Injection
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated u
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Rapid Recipe 1.6.5 - SQL Injection
Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
okul siteleri 'com_mezun' Component - SQL Injection
SQL injection vulnerability in the com_mezun component for Joomla! allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7 - 'graph_xport.php?local_graph_id' SQL Injection
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated u
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Larson Network Print Server 9.4.2 build 105 (LstNPS) - 'NPSpcSVR.exe' License Command Remote Overflow
Stack-based buffer overflow in NPSpcSVR.exe in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier allows r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cyan soft - Multiple Applications Format String / Denial of Service Vulnerabilities
The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.