Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.449exploits catalogados
35.552CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
SimpleGallery 0.1.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tilde 4.0 - 'Aarstal' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Satel Lite - 'Satellite.php' Local File Inclusion
Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GOUAE DWD Realty - 'Password' SQL Injection
SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SafeNet Sentinel Protection Server 7.x/Keys Server 1.0.3 - Directory Traversal
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier version
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 7.2/7.3 (Windows Vista/XP) - RSTP Response Code Execution
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VBTube 1.1 - Search Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bandersnatch 0.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySpace Scripts Poll Creator - 'index.php' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VUNET Mass Mailer - 'default.asp' SQL Injection
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ISPmanager 4.2.15 - Responder Privilege Escalation
The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell meta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution
Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDoub
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
I Hear U 0.5.6 - Multiple Remote Denial of Service Vulnerabilities
I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service
The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a de
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rigs of Rods 0.33d - 'Vehicle Name' Buffer Overflow
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Citrix Netscaler 8.0 build 47.8 - Generic_API_Call.pl Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JiRo's Banner System 2.0 - 'login.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Liferay Portal 4.1 Login Script - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlueZ 1.x/2.x - HIDD Bluetooh HID Command Injection
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Huma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Jet Engine - '.MDB' File Parsing Stack Overflow
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Mi
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x Kernel - 'i386_set_ldt()' Integer Overflow (PoC)
Integer overflow in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere Application Server 5.1.1 - WebContainer HTTP Request Header Security
Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aruba MC-800 Mobility Controller - Screens Directory HTML Injection
Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Control
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CONTENTCustomizer 3.1 - 'Dialog.php' Unauthorized Access
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1
33RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KDE Konqueror 3.5.6 - Cookie Handling Denial of Service
KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie param
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AIDA Web - Frame.HTML Multiple Unauthorized Access Vulnerabilities
frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU TAR 1.15.91 / CPIO 2.5.90 - 'safer_name_suffix' Remote Denial of Service
Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000/2003 - Recursive DNS Spoofing (1)
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebEx GPCContainer - Memory Access Violation Multiple Denial of Service Vulnerabilities
Unspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows remote attackers to cause a
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.