Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.003exploits catalogados
37.620CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.011GitHub PoC 15.501VulnCheck XDB 9077Nuclei 4427Metasploit 3505✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WarpSpeed 4nAlbum Module 0.92 - 'nmimage.php?z' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 3.x - 'register.php' HTTP_REFERER Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Emumail EMU Webmail 5.2.7 - 'emumail.fcgi' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Emumail EMU Webmail 5.2.7 - nit.emu Information Disclosure
EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - Login Script Remote Command Execution
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shel
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - 'dir' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IP3 Networks IP3 NetAccess Appliance - SQL Injection
SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to byp
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pegasi Web Server 0.2.2 - Arbitrary File Access
Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Targem Games Battle Mages 1.0 - Remote Denial of Service
Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with incom
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 5/6/7/8/9 - Resetpass Remote Command Execution
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x,
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU MyProxy 20030629 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or H
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pegasi Web Server 0.2.2 - Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Epic Games Unreal Tournament Server 436.0 - Engine Remote Format String
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 1.x - Cookie Directory Traversal
Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (en
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Outlook 2002 - 'Mailto' Quoting Zone Bypass
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PWebServer 0.3.x - Directory Traversal
Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 1.x - Large JavaScript Array Handling Denial of Service
The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (1)
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VirtuaSystems VirtuaNews 1.0.x (Multiple Modules) - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Red Faction 1.20 - Server Reply Remote Buffer Overflow (PoC)
Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Age of Sail II 1.04.151 - Remote Buffer Overflow
Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickn
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AppleFileServer 10.3.3 (OSX) - LoginEXT PathName Overflow (Metasploit)
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitr
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SpiderSales 2.0 Shopping Cart - Multiple Vulnerabilities
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alpha Black Zero 1.04 - Remote Denial of Service
The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Seriou
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
1st Class Internet Solutions 1st Class Mail Server 4.0 - Remote Buffer Overflow (PoC)
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (cr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nortel Wireless LAN Access Point 2200 Series - Denial of Service
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (s
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not prop
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Squid Proxy 2.4/2.5 - NULL URL Character Unauthorized Access
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a U
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
YaBB SE 1.5.x - Arbitrary File Deletion
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.