Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.270exploits catalogados
37.818CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.178GitHub PoC 15.557VulnCheck XDB 9108Nuclei 4440Metasploit 3505✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
AOLServer 3 - 'Authentication String' Remote Buffer Overflow (1)
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary co
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BSDI 3.0/3.1 - Local Kernel Denial of Service
Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kerne
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Intego FileGuard 2.0/4.0 - Weak Password Encryption
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain priv
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (1)
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privilege
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (2)
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privilege
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
glFTPd 1.x - 'LIST' Denial of Service
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (3)
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privilege
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (4)
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privilege
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - SSI Buffer Overrun Privilege Escalation
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - In-Process Table Privilege Escalation
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 8 - x86 xlock Heap Overflow
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPAT
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.6/7/8 (SPARC) - xlock Heap Overflow
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPAT
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fetchmail 5.x - IMAP Reply Signed Integer Index
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fetchmail 5.x - POP3 Reply Signed Integer Index
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Avaya Argent Office - DNS Packet Denial of Service
Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no paylo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0 - NT4ALL Denial of Service
Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsas
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 1.4 - SQL Query Manipulation
SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 8/9i - DBSNMP Oracle Home Environment Variable Buffer Overflow
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_H
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SuSE 6.3/6.4/7.0 sdb - Arbitrary Command Execution
Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.tx
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle OTRCREP Oracle 8/9 - Home Environment Variable Buffer Overflow
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Omnicron OmniHTTPd 2.0.7 - File Corruption / Command Execution
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, w
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU findutils 4.0/4.1 - Locate Arbitrary Command Execution
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Omnicron OmniHTTPd 2.0.7 - File Corruption / Command Execution
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 1.x - Page Header Arbitrary Command Execution
prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid lang
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 98 - ARP Denial of Service
The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood o
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
id Software Quake 3 Arena Server 1.29 - Buffer Overflow
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection pa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SnapStream PVS 1.2 - Plaintext Password
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain p
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SimpleServer:WWW 1.0.7/1.0.8/1.13 - Hex Encoded URL Directory Traversal
Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary prog
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SnapStream Personal Video Station 1.2 a - PVS Directory Traversal
Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sambar Server 4.x/5.0 - Insecure Default Password Protection
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program f
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.