Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.772exploits catalogados
35.760CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8710Nuclei 4319Metasploit 3476✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
Lussumo Vanilla 1.0 - RootDirectory Remote File Inclusion
PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old_settings.php ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MusicBox 2.3.4 - 'page' SQL Injection
SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Native Function Iterator Denial of Service
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iteratin
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Component multibanners 1.0.1 - Remote File Inclusion
PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Multiple Object ListWidth Property Denial of Service Vulnerabilities
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) F
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cheese Tracker 0.9.9 - Local Buffer Overflow
Buffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese Tracker 0.9.9 and earlie
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Internet.HHCtrl Click Denial of Service
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cras
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GnuPG 1.4/1.9 - Parse_Comment Remote Buffer Overflow
Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentatio
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a de
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - ASP Stack Overflow (MS06-034)
Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote atta
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 5 - Information Disclosure
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.13.5 - Remote Signal Handling (PoC)
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by trig
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chameleon LE 1.203 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.5 - SQL Injection / Admin Credentials Disclosure
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other prod
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PH
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Geodesic Solutions (Multiple Products) - 'index.php?b' SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IDevSpot PHPLinkExchange 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GeoAuctions 1.0.6 Enterprise - 'index.php?d' SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco/Protego CS-MARS < 4.2.1 - 'JBoss' Remote Code Execution
Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Res
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteDepth CMS 3.0.1 - 'SD_DIR' Remote File Inclusion
PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MiniBB 1.5 - 'news.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IDevSpot PHPHostBot 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - String To Binary Function Denial of Service
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cras
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - DataSourceControl Denial of Service
DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a deni
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and ear
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - OVCtl Denial of Service
Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Security Monitoring Analysis and Response System JBoss - Command Execution
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitorin
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 2.1 < 2.1.6 - SQL Injection (2)
SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote att
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.