Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.417exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.617VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
GNU Anubis 3.6.x/3.9.x - Multiple Format String Vulnerabilities
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to ex
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
YaBB SE 1.5.x - Multiple SQL Injections
Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
YaBB SE 1.5.x - Arbitrary File Deletion
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not prop
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chatman 1.5.1 RC1 - Broadcast Crash
Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application cr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WFTPD Server 3.21 - Remote Buffer Overflow
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PAS
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Serve
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5/6 - Cross-Domain Event Leakage
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and cap
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3.x/4.x/5.x - 'MDTM' Remote Overflow
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper Pro 4.7 - Web proxy Remote Buffer Overflow
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 (Windows 2000/XP) - Remote Buffer Overflow
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (1)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - MDTM Command Time Argument Buffer Overflow (4)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (2)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (3)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MTools 3.9.x - 'MFormat' Local Privilege Escalation
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permission
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Cygwin 1.3.x/2.0.x - Directory Traversal
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RobotFTP Server 1.0/2.0 - Remote Denial of Service
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedStorm Ghost Recon Game Engine - Remote Denial of Service
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GWeb HTTP Server 0.5/0.6 - Directory Traversal
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samhain Labs 1.x - HSFTP Remote Format String
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpNewsManager 1.36 - functions Script File Disclosure
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EZBoard 7.3 - Font Tag HTML Injection
Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper 4.7 Web Proxy - Buffer Overrun
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.