Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.305exploits catalogados

36.465CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientes populares riesgo

22.936 exploits

Referência

CVE-2015-6973

CVE-2015-6973—

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to

35RIESGO

abrir ↗

Referência

CVE-2015-6973

CVE-2015-6973—

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to

35RIESGO

abrir ↗

Referência

CVE-2016-7237

CVE-2016-7237—

Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W

35RIESGO

abrir ↗

Referência

CVE-2022-23221

CVE-2022-23221CRITICAL

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IG

60RIESGO

abrir ↗

Referência

CVE-2016-10175

CVE-2016-10175—

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. Thi

50RIESGO

abrir ↗

Referência✓ VexDay Proof

X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition

CVE-2007-3103—locallinux

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Kravchuk letter script 1.0 - 'scdir' Remote File Inclusion

CVE-2007-3118—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter (K-letter) 1.0 allow remote attackers to execute a

23RIESGO

abrir ↗

Referência✓ VexDay Proof

phpsmartcom 0.2 - Local File Inclusion / SQL Injection

CVE-2008-4352—webappsphp

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Kartli Alisveris Sistemi 1.0 - SQL Injection

CVE-2007-3119—webappsasp

SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote at

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ABC Advertise 1.0 - Admin Password Disclosure

CVE-2009-1550—webappsphp

Zakkis Technology ABC Advertise 1.0 does not properly restrict access to admin.inc.php, which allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2015-1486

CVE-2015-1486—

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers t

50RIESGO

abrir ↗

Referência

CVE-2017-11764

CVE-2017-11764—

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code

35RIESGO

abrir ↗

Referência

CVE-2013-5019

CVE-2013-5019—

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour

50RIESGO

abrir ↗

Referência

CVE-2013-5019

CVE-2013-5019—

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour

50RIESGO

abrir ↗

Referência

CVE-2013-5019

CVE-2013-5019—

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour

50RIESGO

abrir ↗

Referência

CVE-2013-5019

CVE-2013-5019—

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour

50RIESGO

abrir ↗

Referência

CVE-2016-2296

CVE-2016-2296—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pag

50RIESGO

abrir ↗

Referência

CVE-2022-44149

CVE-2022-44149HIGH

The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by

53RIESGO

abrir ↗

Referência

CVE-2018-1217

CVE-2018-1217—

Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection A

50RIESGO

abrir ↗

Referência✓ VexDay Proof

cf shopkart 5.2.2 - SQL Injection / File Disclosure

CVE-2008-6320—webappsasp

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência✓ VexDay Proof

iBoutique 4.0 - 'cat' SQL Injection

CVE-2008-4354—webappsphp

SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência✓ VexDay Proof

CFMBLOG - 'categorynbr' Blind SQL Injection

CVE-2008-6322—webappsasp

SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands

23RIESGO

abrir ↗

Referência

CVE-2020-0674

CVE-2020-0674HIGHbajo ataque

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

93RIESGO

abrir ↗

Referência

CVE-2014-6277

CVE-2014-6277—

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

35RIESGO

abrir ↗

Referência✓ VexDay Proof

pForum 1.30 - 'showprofil.php' SQL Injection

CVE-2008-4355—webappsphp

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows r

23RIESGO

abrir ↗

Referência

CVE-2022-1609

CVE-2022-1609CRITICAL

The School Management < 9.9.7 - Unauthenticated RCE via REST api

75RIESGO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.7 - 'probe read' Local Kernel Denial of Service (PoC)

CVE-2008-4363—doswindows

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially exe

23RIESGO

abrir ↗

Referência✓ VexDay Proof

ParsaWeb CMS - 'Search' SQL Injection

CVE-2008-4364—webappsasp

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities

CVE-2008-4370—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrar

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Xserver 0.1 Alpha - 'POST' Remote Buffer Overflow (PoC)

CVE-2007-3957—doslinux

Buffer overflow in Nipun Jain xserver 0.1 alpha allows remote attackers to cause a denial of service via a POST request

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.