Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.724exploits catalogados
35.724CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8703Nuclei 4314Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
INFINICART - 'login.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Property Pro 1.0 - 'vir_Login.asp' Remote Authentication Bypass
SQL injection vulnerability in vir_Login.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'search.asp?search' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quick.Cart 2.0 - '/actions_client/gallery.php' Local File Inclusion
Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'browsesubcat.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'browse_group.asp?groupid' SQL Injection
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'sendpassword.asp?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere 6.0 - 'Faultactor' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSph
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'added_to_cart.asp?ProductID' SQL Injection
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)
Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC30
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_EMAIL_VACATION_MODIFY' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_EMAIL_FORWARDER_MODIFY' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPdebug 1.1 - 'Debug_test.php' Remote File Inclusion
PHP remote file inclusion vulnerability in tests/debug_test.php in Vernet Loic PHP_Debug 1.1.0 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_FTP_SHOW' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_EMAIL_LIST' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_SHOW_RESELLER' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_TICKET' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_TICKET_CREATE' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_SHOW_USER' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ExoPHPDesk 1.2 - 'Pipe.php' Remote File Inclusion
PHP remote file inclusion vulnerability in pipe.php in Exophpdesk 1.2 allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (2)
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.x - '/blogs/list_blogs.php?sort_mode' SQL Injection
bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.x - '/fisheye/list_galleries.php?sort_mode' SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (3)
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.x - '/wiki/orphan_pages.php?sort_mode' SQL Injection
bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.x - '/fisheye/index.php?sort_mode' SQL Injection
bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.x - '/wiki/list_pages.php?sort_mode' SQL Injection
bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - FPathConf System Call Local Denial of Service
The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows loca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
bitweaver 1.x - '/newsletters/edition.php?tk' SQL Injection
SQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LetterIt 2.0 - 'session.php' Remote File Inclusion
PHP remote file inclusion vulnerability in inc/session.php for LetterIt 2 allows remote attackers to execute arbitrary P
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.