Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.249exploits catalogados
37.814CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.178GitHub PoC 15.553VulnCheck XDB 9091Nuclei 4440Metasploit 3505✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
Winamp 5.06 - 'IN_CDDA.dll' Remote Buffer Overflow
Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote att
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Star Wars Battlefront 1.1 - Fake Players Denial of Service
Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a jo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Star Wars Battlefront 1.1 - Fake Players Denial of Service
Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (applicat
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KorWeblog 1.6.2 - Remote Directory Listing
Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jabber Server 2.0 - Multiple Remote Buffer Overflow Vulnerabilities
Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a deni
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zwiki 0.10/0.36.2 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SugarCRM 1.x/2.0 Module - Traversal Arbitrary File Access
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Prozilla 1.3.6 - Remote Stack Overflow
Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in Pr
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SugarCRM 1.x/2.0 Module - 'record' SQL Injection
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Soldier of Fortune II 1.3 Server/Client - Denial of Service
Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (ser
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset
ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Runtime Environment 1.x Java Plugin - JavaScript Security Restriction Bypass
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, do
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
wodFtpDLX Client - ActiveX Control Buffer Overflow Crash
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.10 - Remote Command Execution
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrase
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKIT 1.6 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Halo 1.05 - Broadcast Client Crash
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 2.0.0 < 2.0.2 - SQL Injection
SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - IPTables Logging Rules Integer Underflow Remote (PoC)
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a de
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow
Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TWiki 20030201 - 'search.pm' Remote Command Execution
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPBProArcade 2.5 - SQL Injection
SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6.0 SP2 - File Download Security Warning Bypass
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name o
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Altiris Deployment Solution 5.6 - Client Service Privilege Escalation
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Compressed Zipped Folders (MS04-034)
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows S
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1)
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cscope 13.0/15.x - Insecure Temporary File Creation (2)
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.x - 'admin_cash.php' PHP Remote File Inclusion
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cscope 13.0/15.x - Insecure Temporary File Creation (1)
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MiniShare 1.4.1 - Remote Buffer Overflow (2)
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req
60RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.