Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.439exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.639VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell TrueMobile 1300 WLAN System 3.10.39.0 Tray Applet - Local Privilege Escalation
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LGames LBreakout2 2.2.2 - Multiple Environment Variable Buffer Overflow Vulnerabilities
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (3)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (2)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TYPSoft FTP Server 1.1 - Remote CPU Consumption (Denial of Service)
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arg
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (1)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration
Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/wr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Metamail 2.7 - Multiple Buffer Overflow / Format String Handling Vulnerabilities
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'glossary.php' Arbitrary File Access
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'readings/index.php' Arbitrary File Access
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'newmultiplechoice.php' Arbitrary File Access
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebCortex WebStores2000 - 'error.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eCommerce Corporation Online Store Kit 3.0 - 'shop.php?cat' SQL Injection
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorize
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eCommerce Corporation Online Store Kit 3.0 - 'listing.php?id' SQL Injection
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorize
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Validator
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not prop
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eCommerce Corporation Online Store Kit 3.0 - 'shop_by_brand.php?cat_manufacturer' SQL Injection
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorize
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'resultsignore.php' Arbitrary File Access
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - '/glossaries/index.php?File' Arbitrary File Access
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'multiplechoice/index.php' Arbitrary File Access
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SmallFTPd 1.0.3 - Remote Denial of Service
Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a larg
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TransSoft Broker FTP Server 6.1 - Denial of Service
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open id
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RobotFTP Server 1.0/2.0 - 'Username' Buffer Overflow (2)
Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProductCart 1.x/2.x - 'advSearch_h.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Freeform Interactive Purge 1.4.7/Purge Jihad 2.0.1 Game Client - Remote Buffer Overflow
Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xlight FTP Server 1.52 - Remote Send File Request Denial of Service
Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProductCart 1.x/2.x - Weak Cryptography
EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ACLogic CesarFTP 0.99 - Remote Resource Exhaustion (Denial of Service)
CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot d
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.