Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
80.930exploits catalogados
37.572CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 23.973GitHub PoC 15.478VulnCheck XDB 9069Nuclei 4426Metasploit 3502✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
O3Read 0.0.3 - HTML Parser Buffer Overflow
Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary cod
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gadu-Gadu 6.0 - URL Parser JavaScript Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xine-Lib 0.9/1 - Remote Client-Side Buffer Overflow
Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RTF2LATEX2E 1.0 - Remote Stack Buffer Overflow
Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitr
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WinRAR 3.4.1 - Corrupt '.ZIP' File
WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.28/2.6.9 - vc_resize int Local Overflow
Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XLReader 0.9 - Remote Client-Side Buffer Overflow
Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IkonBoard 3.x - Multiple SQL Injections
SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.28/2.6.9 - 'ip_options_get' Local Overflow
Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of ser
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MediaWiki 1.3.x - Arbitrary Script Upload
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, su
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4/5 - 'addslashes()' Null Byte Bypass
The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vilistextum 2.6.6 - HTML Attribute Parsing Buffer Overflow
Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary co
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpGroupWare 0.9.x - 'viewticket_details.php?ticket_id' SQL Injection
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QwikMail 0.3 - 'HELO' Buffer Overflow (PoC)
Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASP2PHP 0.76.23 - Preparse Token Variable Buffer Overflow
Multiple buffer overflows in the preparse function in asp2php 0.76.23 allow remote attackers to execute arbitrary code v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CUPS 1.1.x - '.HPGL' File Processor Buffer Overflow
Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ABCPP 1.3 - Directive Handler Buffer Overflow
Multiple buffer overflows in the handle_directive function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NASM 0.98.x - Error Preprocessor Directive Buffer Overflow
Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PCAL 4.x - Calendar File 'getline' Remote Buffer Overflow
Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for p
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ABC2MIDI 2004-12-04 - Multiple Stack Buffer Overflow Vulnerabilities
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote att
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LinPopUp 1.2 - Remote Buffer Overflow
Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 3/4/5 - Multiple Local/Remote Vulnerabilities (2)
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial o
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 3/4/5 - Multiple Local/Remote Vulnerabilities (1)
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial o
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpGroupWare 0.9.x - 'viewticket_details.php?ticket_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Michael Kohn Ringtone Tools 2.22 - '.EMelody' File Remote Buffer Overflow
Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to execu
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
abctab2ps 1.6.3 - 'Trim_Title' '.ABC' File Remote Buffer Overflow
Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abct
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IWebNegar - Multiple SQL Injections
SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string pa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MPG123 0.59 - Find Next File Remote Client-Side Buffer Overflow
Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitra
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenText FirstClass 8.0 - HTTP Daemon /Search Remote Denial of Service
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availab
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PCAL 4.x - Calendar File 'get_holiday' Remote Buffer Overflow
Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for p
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.