Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.772exploits catalogados
35.760CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8710Nuclei 4319Metasploit 3476✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
Plume CMS 1.0.4 - 'search.php?_PX_config[manager_path]' Remote File Inclusion
PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QTO File Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow
client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow
client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow
The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SmartSite CMS 1.0 - 'root' Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SturGeoN Upload - Arbitrary File Upload
SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then di
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Diesel Joke Site - 'Category.php' SQL Injection
SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Plume CMS 1.1.3 - 'dbinstall.php' Remote File Inclusion
PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stud.IP 1.3.0-2 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - TCP/IP Protocol Driver Remote Buffer Overflow
Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and ear
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz Banner Exchange Script 1.0 - 'insertmember.php?city' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
newsPHP 2006 PRO - '/inc/rss_feed.php?category' SQL Injection
Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz Banner Exchange Script 1.0 - 'lostpassword.php?PHPSESSID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
newsPHP 2006 PRO - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - RRAS RASMAN Registry Stack Overflow (MS06-025) (Metasploit)
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
newsPHP 2006 PRO - 'index.php' Multiple SQL Injections
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz Banner Exchange Script 1.0 - 'index.php?PHPSESSID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz Banner Exchange Script 1.0 - 'gen_confirm_mem.php?PHPSESSID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPClassifieds.Info - Multiple Input Validation Vulnerabilities
SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Blog:CMS 4.0.0k - SQL Injection
SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CrisoftRicette 1.0 - 'Cookbook.php' Remote File Inclusion
PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - OpenLDAP Denial of Service
OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MF Piadas 1.0 - 'admin.php' Remote File Inclusion
PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - OuterHTML redirection Handling Information Disclosure
Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information f
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MF Piadas 1.0 - 'admin.php' Cross-Site Scripting
PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenGuestbook 0.5 - 'view.php?offset' SQL Injection
SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10 - Select.HTML Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenGuestbook 0.5 - 'header.php?title' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MVNForum Activatemember 1.0 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attack
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.