Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.449exploits catalogados
35.552CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8649Nuclei 4283Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
VietPHP - '_functions.php?dirpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VietPHP - 'index.php?language' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BIND 9 0.3beta - DNS Cache Poisoning
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolve
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VietPHP - '/admin/index.php?language' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlueCat Networks Adonis 5.0.2.8 - TFTP Privilege Escalation
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
snif 1.5.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Panda AntiVirus 2008 - Local Privilege Escalation
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
J! Reactions 1.8.1 - comPath Remote File Inclusion
PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 EZSHOPINGCART Module - 'cid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 FAQ Module - 'mid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 GALLERY Module - 'gid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Next Gen Portfolio Manager - 'default.asp' Multiple SQL Injections
SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Tour de France Pool 1.0.1 Module - MosConfig_absolute_path Remote File Inclusion
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hunkaray Okul Portali 1.1 - 'Duyuruoku.asp' SQL Injection
SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tor 0.1.2.15 - ControlPort Missing Authentication Unauthorized Access
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebDirector - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebEvent 4.03 - 'Webevent.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Asterisk < 1.2.22/1.4.8 - IAX2 Channel Driver Remote Crash
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, A
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox/Thunderbird/SeaMonkey - Chrome-Loaded About:Blank Script Execution
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BlueSkyChat ActiveX Control 8.1.2 - Remote Buffer Overflow
Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Yahoo! Widget < 4.0.5 - 'GetComponentVersion()' Remote Overflow
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'titletext-ed.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'vote.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'admin.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'index.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Baidu Soba Search Bar 5.4 - 'BaiduBar.dll' ActiveX Control Remote Code Execution
A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Online Store Application Template - 'Sign_In.aspx' SQL Injection
SQL injection vulnerability in sign_in.aspx in WebStore (Online Store Application Template) allows remote attackers to e
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.