Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.533exploits catalogados
35.607CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8663Nuclei 4287Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.451 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EsForum 3.0 - 'forum.php?idsalon' SQL Injection
SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - '.ani' GDI Remote Privilege Escalation (MS07-017)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - NETLINK_FIB_LOOKUP Local Denial of Service
The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 3.5/4.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Comus 2.0 - 'Accept.php' Remote File Inclusion
PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary PH
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyNewsGroups 0.6 - 'Include.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include.php in MyNewsGroups :) allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DynaTracker 1.5.1 - 'action.php?base_path' Remote File Inclusion
PHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HTMLEditBox 2.2 - 'config.php' Remote File Inclusion
PHP remote file inclusion vulnerability in _editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DynaTracker 1.5.1 - 'includes_handler.php?base_path' Remote File Inclusion
PHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ahhp Portal - 'page.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
plesk 8.1.1 - 'login.php3' Directory Traversal
Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HYIP Manager Pro - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetSprint Toolbar - ActiveX 'toolbar.dll' Denial of Service (PoC)
Buffer overflow in the isChecked function in toolbar.dll in Netsprint Toolbar 1.1 might allow remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)
Multiple stack-based buffer overflows in Second Sight Software ActiveGS ActiveX control (ActiveGS.ocx) allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cdelia Software ImageProcessing - '.BMP' File Denial of Service
Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service (application crash) v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow (PoC)
Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control (ActiveMod.ocx) allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Mailutils imap4d 0.6 - exec-shield Remote Format String
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to e
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
File117 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TJSChat 0.95 - 'You.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in you.php in TJSChat 0.95 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'admin.php?Groups Module group_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyBibli 1.32 - 'Init.Inc.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/init.inc.php in PHPMyBibli allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'admin.php' badwords/banlist Module SQL Injection
Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - '/include/controlcenter/users.php' Multiple Method Privilege Escalations
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'pm.php' Recipient Name SQL Injection
Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lms 1.5.x - 'RTMessageAdd.php' Remote File Inclusion
PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly 1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection
Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure
admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.