Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.620exploits catalogados
35.647CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8693Nuclei 4299Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/goodies.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word 2000 - Code Execution
Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/index.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_search/index.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KDPics 1.11 - 'exif.php?lib_path' Remote File Inclusion
Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/index.php?chemin' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasyMail Objects 6.x - Connect Method Remote Stack Buffer Overflow
Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPProbid 5.24 - 'Lang.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lang.php in PHPProbid 5.24 allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flipper Poll 1.1.0 - 'poll.php?root_path' Remote File Inclusion
PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities
Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Portail Web PHP 2.5.1 - 'includes.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Por
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve - 'lgserver.exe' Remote Stack Overflow
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Comodo Firewall 2.3.6 - 'CMDMon.SYS' Multiple Denial of Service Vulnerabilities
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EncapsCMS 0.3.6 - 'common_foot.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persis
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - iPhoto 'photo://' URL Handling Format String
Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - Safari window.console.log Format String
Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of ser
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CascadianFAQ 4.1 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - Help Viewer '.help' Filename Format String
Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (cra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - iMovie HD '.imovieproj' Filename Format String
Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-as
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 10 - ICMP Remote Denial of Service
Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Printer Providers (Spooler Service) - Local Privilege Escalation
Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remo
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CVSTrac 2.0.0 - Defacement Denial of Service
The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities
Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of se
35RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.