Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.724exploits catalogados
35.724CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8703Nuclei 4314Metasploit 3474✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
Buzlas 2006-1 Full - 'Archive_Topic.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Geotarget - 'script.php' Remote File Inclusion
PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting (aka geotarget) allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - WebViewFolderIcon setSlice() (1)
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - WebViewFolderIcon setSlice() (2)
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.5.1.1 - 'doeditconfig.php' Code Execution
Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - WebViewFolderIcon setSlice() (HTML)
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AIX 3.x/4.x / Windows 95/98/2000/NT 4.0 / SunOS 5 - 'gethostbyname()' Remote Buffer Overflow
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAP Internet Transaction Server 6.10/6.20 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB XS 0.58a - 'phpbb_root_path' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Blog Pixel Motion 2.1.1 - PHP Code Execution / Create Admin
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct requ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component VirtueMart Joomla! eCommerce Edition 1.0.11 - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla!
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Blog Pixel Motion 2.1.1 - PHP Code Execution / Create Admin
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrar
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSH 4.3 p1 - Duplicated Block Remote Denial of Service
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSelect Web Development - 'index.php3' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MKPortal 1.0/1.1 - 'PMPopup.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 2.3.x - 'global.php' SQL Injection
SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/forgot_pass.php?user_name' SQL Injection
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/nav.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/print_order.php?order_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - 'footer.inc.php?la_pow_by' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String
Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote att
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phoenix Evolution CMS - '/modules/pageedit/index.php?pageid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phoenix Evolution CMS - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - 'view_doc.php?view_doc' SQL Injection
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/print_order.php?order_id' SQL Injection
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Invoice 2.2 - 'home.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - 'view_order.php?order_id' SQL Injection
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - '/admin/image.php?image' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitra
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.