Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - 'RPC DCOM2' Remote (MS03-039)
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and loc
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution
Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a l
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LSH 1.x - Remote Buffer Overflow (2)
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cli
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LSH 1.x - Remote Buffer Overflow (1)
lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) cli
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris Sadmind - Default Configuration Remote Code Execution
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attack
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM DB2 db2dart - Buffer Overflow
Buffer overflow in db2dart in IBM DB2 Universal Data Base 7.2 before Fixpak 10 allows local users to gain root privilege
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.12.9 - 'Prescan()' Variant Remote Buffer Overrun
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Pine 4.56 - Remote Buffer Overflow
Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-b
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'RPC DCOM' Long Filename Overflow (MS03-026)
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nokia Electronic Documentation 5.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nokia Electronic Documentation 5.0 - Connection redirection
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the locat
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nokia Electronic Documentation 5.0 - Path Disclosure
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 3.23.x/4.0.x - Remote Buffer Overflow
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers wit
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'RPC DCOM' Scanner (MS03-039)
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and loc
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 3.23.x/4.0.x - Password Handler Buffer Overflow
Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers wit
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Roger Wilco 1.x - Client Data Buffer Overflow
Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Script Execution
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5 - window.open Search Pane Cross-Zone Scripting
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NullSoft Winamp 2.81/2.91/3.0/3.1 - MIDI Plugin 'IN_MIDI.dll' Track Data Size Buffer Overflow (PoC)
The IN_MIDI.DLL plugin 3.01 and earlier, as used in Winamp 2.91, allows remote attackers to execute arbitrary code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5 - XML Page Object Type Validation (MS03-040)
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data bindi
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FTP Desktop 3.5 - Banner Parsing Buffer Overflow
Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ICQ 2003 - Webfront Guestbook Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the ICQ Web Front guestbook (guestbook.html) allows remote attackers to inse
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FTP Desktop 3.5 - FTP 331 Server Response Buffer Overflow
Multiple heap-based buffer overflows in FTP Desktop client 3.5, and possibly earlier versions, allow remote malicious se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mah-Jong 1.4 - Client/Server Remote sscanf() Buffer Overflow
Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5/6 - Browser Popup Window Object Type Validation
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creati
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mah-Jong 1.4/1.6 - Server Remote Denial of Service
Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft WordPerfect Document Converter (Windows NT4 Workstation SP5/SP6 French) - File Template Buffer Overflow (MS03-036)
Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data o
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stunnel 3.24/4.00 - Daemon Hijacking
Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WS_FTP Server 3.4/4.0 - FTP Command Buffer Overrun
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly e
45RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.