Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.366exploits catalogados
37.872CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.213GitHub PoC 15.592VulnCheck XDB 9133Nuclei 4441Metasploit 3505✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
IPFilter 3.x - Fragment Rule Bypass
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (2)
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overf
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (1)
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overf
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco PIX 4.x/5.x TACACS+ - Denial of Service
Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to c
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTPd 4.0.99j-k readvar - Remote Buffer Overflow (Metasploit)
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTPd - Remote Buffer Overflow
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gene6 BPFTP Server 2.0 - File Existence Disclosure
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Caucho Technology Resin 1.2/1.3 - JavaBean Disclosure
Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting info
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microburst uStorekeeper 1.x - Arbitrary Commands
Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (1)
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F'
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 3.0 - Directory Traversal
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary '
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCO Open Server 5.0.6 - lpforms Buffer Overflow
Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a lo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
anaconda clipper 3.3 - Directory Traversal
Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCO Open Server 5.0.6 - recon Buffer Overflow
recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCO Open Server 5.0.6 - lpshut Buffer Overflow
Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long fi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCO Open Server 5.0.6 - lpusers Buffer Overflow
lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCO OpenServer 5.0.6 - lpadmin Buffer Overflow
lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.5/2.6/7.0/8 tip - Local Buffer Overflow
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.18 (RedHat 6.2/7.0 / 2.2.14/2.2.18/2.2.18ow4) - ptrace/execve Race Condition Privilege Escalation (2)
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.18 (RedHat 6.2/7.0 / 2.2.14/2.2.18/2.2.18ow4) - ptrace/execve Race Condition Privilege Escalation (1)
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String
Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon 3.5.6/5.0.7/6.x - IMAP Denial of Service
IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SEL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Junsoft JSparm 4.0 - Logging Output File
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File opt
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
elron im Anti-Virus 3.0.3 - Directory Traversal
Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-V
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SWSoft ASPSeek 1.0 - 's.cgi' Remote Buffer Overflow
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DG/UX 4.20 lpsched - 'Error Message' Local Buffer Overflow
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 5.0.2 - 'Use Microsoft Viewer' Code Execution
Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executa
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 3.20.32 a/3.23.34 - Root Operation Symbolic Link File Overwriting
Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileg
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.