Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.801exploits catalogados
35.788CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8710Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
22.523 exploits
Referência
CVE-2018-0709
CVE-2018-0709—
Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow auth
28RIESGO
abrir ↗
Referência
CVE-2018-0709
CVE-2018-0709—
Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow auth
28RIESGO
abrir ↗
Referência
CVE-2019-7391
CVE-2019-7391—
ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.
28RIESGO
abrir ↗
Referência
CVE-2019-7391
CVE-2019-7391—
ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.
28RIESGO
abrir ↗
Referência
CVE-2010-1352
CVE-2010-1352—
Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote
43RIESGO
abrir ↗
Referência
CVE-2010-1491
CVE-2010-1491—
Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to r
43RIESGO
abrir ↗
Referência
CVE-2010-1491
CVE-2010-1491—
Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to r
43RIESGO
abrir ↗
Referência
CVE-2018-6383
CVE-2018-6383—
Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but
28RIESGO
abrir ↗
Referência
CVE-2015-6589
CVE-2015-6589—
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before
28RIESGO
abrir ↗
Referência
CVE-2015-6589
CVE-2015-6589—
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before
28RIESGO
abrir ↗
Referência
CVE-2014-5465
CVE-2014-5465—
Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component musepoes - 'aid' SQL Injection
CVE-2008-0515—webappsphp
SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and Joomla! allows remote at
23RIESGO
abrir ↗
Referência
CVE-2011-4620
CVE-2011-4620—
Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products,
28RIESGO
abrir ↗
Referência
CVE-2015-2826
CVE-2015-2826—
WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information.
28RIESGO
abrir ↗
Referência
CVE-2015-2826
CVE-2015-2826—
WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information.
28RIESGO
abrir ↗
Referência
CVE-2021-44664
CVE-2021-44664—
An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupl
28RIESGO
abrir ↗
Referência
CVE-2015-0057
CVE-2015-0057—
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
28RIESGO
abrir ↗
Referência
CVE-2017-11840
CVE-2017-11840—
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versio
35RIESGO
abrir ↗
Referência
CVE-2017-8657
CVE-2017-8657—
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary
35RIESGO
abrir ↗
Referência
CVE-2023-4596
CVE-2023-4596CRITICAL
Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
68RIESGO
abrir ↗
Referência
CVE-2014-8498
CVE-2014-8498—
SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager P
28RIESGO
abrir ↗
Referência
CVE-2014-8498
CVE-2014-8498—
SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP) and Password Manager P
28RIESGO
abrir ↗
Referência
CVE-2017-17976
CVE-2017-17976—
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
28RIESGO
abrir ↗
Referência
CVE-2017-17976
CVE-2017-17976—
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
28RIESGO
abrir ↗
Referência✓ VexDay Proof
TPTEST 3.1.7 - Stack Buffer Overflow (PoC)
CVE-2009-0650—doswindows
Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remo
28RIESGO
abrir ↗
Referência
CVE-2013-1601
CVE-2013-1601—
An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processin
28RIESGO
abrir ↗
Referência✓ VexDay Proof
SapLPD 6.28 (Windows x86) - Remote Buffer Overflow
CVE-2008-0621—remotewindows_x86
Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to
60RIESGO
abrir ↗
Referência
CVE-2010-1715
CVE-2010-1715—
Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joom
38RIESGO
abrir ↗
Referência
CVE-2018-19861
CVE-2018-19861—
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD re
28RIESGO
abrir ↗
Referência
CVE-2018-19861
CVE-2018-19861—
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD re
28RIESGO
abrir ↗
← anteriorpágina 543 / 751siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.