Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.270exploits catalogados
37.818CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.178GitHub PoC 15.557VulnCheck XDB 9108Nuclei 4440Metasploit 3505✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Powie PForum 1.1x - 'Username' Cross-Site Scripting
Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache 1.3 - Artificially Long Slash Path Directory Listing (2)
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview in
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tarantella Enterprise 3 - Symbolic Link
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNUJSP 1.0 - File Disclosure
gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass acce
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Icecast 1.x - AVLLib Buffer Overflow
Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phusion WebServer 1.0 - Long URL Denial of Service
Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary cod
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phusion WebServer 1.0 - 'URL' Remote Buffer Overflow
Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary cod
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phusion WebServer 1.0 - Directory Traversal (2)
Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phusion WebServer 1.0 - Directory Traversal (1)
Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ettercap 0.6.3.1 - Large Packet Buffer Overflow
Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 11/12 - SNMP Message Denial of Service
Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sawmill 6.2.x - Admin Password Insecure Default Permissions
Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows loca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EZNE.NET Ezboard 2000 - Remote Buffer Overflow
Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long bounda
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tarantella Enterprise 3 - gunzip Race Condition
Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable tempor
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 5.0 - Content-Type Remote Buffer Overflow
Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a respon
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP AdvanceStack Switch - Authentication Bypass
Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OS/400 - User Account Name Disclosure
The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Caldera UnixWare 7.1.1 - Message Catalog Environment Variable Format String
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privil
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hanterm 3.3 - Local Buffer Overflow (2)
Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hanterm 3.3 - Local Buffer Overflow (1)
Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AtheOS 0.3.7 - Change Root Directory Escaping
Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sambar Server 5.1 - Sample Script Denial of Service
cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execut
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Thunderstone TEXIS 3.0 - Full Path Disclosure
Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ICQ For Mac OSX 2.6 Client - Denial of Service
Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and pos
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Faq-O-Matic 2.6/2.7 - Cross-Site Scripting
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Portix-PHP 0.4 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Portix-PHP 0.4 - 'view.php' Directory Traversal
Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x/5.x MySQL Library - 'Safe_mode' Filesystem Circumvention (2)
Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x/5.x MySQL Library - 'Safe_mode' Filesystem Circumvention (1)
Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.