Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.696 exploits
Exploit-DB✓ VexDay Proof
ChBg 1.5 - Scenario File Overflow
Buffer overflow in the simplify_path function in config.c for ChBg 1.5 allows remote attackers to execute arbitrary code
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpGroupWare 0.9.x - 'viewticket_details.php?ticket_id' SQL Injection
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
abctab2ps 1.6.3 - 'Write_Heading' '.ABC' Remote Buffer Overflow
Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abct
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpGroupWare 0.9.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenText FirstClass 8.0 - HTTP Daemon /Search Remote Denial of Service
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availab
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IWebNegar - Multiple SQL Injections
SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string pa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MPG123 0.59 - Find Next File Remote Client-Side Buffer Overflow
Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitra
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASP-Rider - SQL Injection
SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.22-28/2.6.9 - 'igmp.c' Local Denial of Service
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local an
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.28/2.6.9 - 'scm_send Local' Denial of Service
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Active Server Corner ASP Calendar 1.0 - Administrative Access
The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unaut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 7.54 - 'KDE KFMCLIENT' Remote Command Execution
Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitr
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Session Acknowledgement Number Denial of Service
The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) vi
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.2.3/6.5 - 'login.php?Cat' Cross-Site Scripting
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 2.x - External Transformations Remote Command Execution
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lithtech Engine (new protocol) - Socket Unreacheable Denial of Service
The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.2.3/6.5 - 'calendar.php?Cat' Cross-Site Scripting
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.2.3/6.5 - 'online.php?Cat' Cross-Site Scripting
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.2.3/6.5 - 'showflat.php?Cat' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Debian top - Format String
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fun
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Citadel/UX 6.27 - Format String
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute ar
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Software Products LPPassWd 1.1.22 - Resource Limit Denial of Service
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NapShare 1.2 - Remote Buffer Overflow (2)
Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows re
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Wget 1.x - Multiple Vulnerabilities
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which m
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX Adobe Version Cue - Local Privilege Escalation
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
darryl burgdorf weblibs 1.0 - Directory Traversal
Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MD5 - Message Digest Algorithm Hash Collision
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to co
53RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Battlefield 1942 1.6.19 + Vietnam 1.2 - Broadcast Client Crash
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NapShare 1.2 - Remote Buffer Overflow (1)
Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows re
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.