Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados
39.298CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
3523 exploits
Metasploit400
Wireshark wiretap/mpeg.c Stack Buffer Overflow
CVE-2014-2299—20 mar 2014
Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10
50RIESGO
abrir ↗
Metasploit600
SePortal SQLi Remote Code Execution
CVE-2008-5191—20 mar 2014
Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the
43RIESGO
abrir ↗
Metasploit600
Firefox WebIDL Privileged Javascript Injection
CVE-2014-1511—17 mar 2014
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remo
60RIESGO
abrir ↗
Metasploit600
Firefox WebIDL Privileged Javascript Injection
CVE-2014-1510—17 mar 2014
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and Se
60RIESGO
abrir ↗
Metasploit200
VirtualBox 3D Acceleration Virtual Machine Escape
CVE-2014-0983—11 mar 2014
Multiple array index errors in programs that are automatically generated by VBox/HostServices/SharedOpenGL/crserverlib/s
38RIESGO
abrir ↗
Metasploit300
MS14-012 Microsoft Internet Explorer TextRange Use-After-Free
CVE-2014-0307—11 mar 2014
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause
50RIESGO
abrir ↗
Metasploit600
ifwatchd Privilege Escalation
CVE-2014-2533—10 mar 2014
/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arb
38RIESGO
abrir ↗
Metasploit200
Yokogawa CENTUM CS 3000 BKHOdeq.exe Buffer Overflow
CVE-2014-0783—10 mar 2014
Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
75RIESGO
abrir ↗
Metasploit300
Yokogawa CS3000 BKESimmgr.exe Buffer Overflow
CVE-2014-0782—10 mar 2014
Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
68RIESGO
abrir ↗
Metasploit300
Yokogawa CENTUM CS 3000 BKBCopyD.exe Buffer Overflow
CVE-2014-0784—10 mar 2014
Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
68RIESGO
abrir ↗
Metasploit300
Yokogawa CENTUM CS 3000 BKCLogSvr.exe Heap Buffer Overflow
CVE-2014-0781—10 mar 2014
Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow
48RIESGO
abrir ↗
Metasploit300
GetGo Download Manager HTTP Response Buffer Overflow
CVE-2014-2206—09 mar 2014
Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attac
50RIESGO
abrir ↗
Metasploit600
Dell KACE K1000 File Upload
CVE-2014-125113CRITICAL07 mar 2014
Dell/Quest KACE K1000 Unauthenticated File Upload RCE
43RIESGO
abrir ↗
Metasploit0
Apache Struts ClassLoader Manipulation Remote Code Execution
CVE-2014-0114—06 mar 2014
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in o
60RIESGO
abrir ↗
Metasploit0
Apache Struts ClassLoader Manipulation Remote Code Execution
CVE-2014-0112—06 mar 2014
ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which all
60RIESGO
abrir ↗
Metasploit0
Apache Struts ClassLoader Manipulation Remote Code Execution
CVE-2014-0094—06 mar 2014
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via t
60RIESGO
abrir ↗
Metasploit0
Vtiger Install Unauthenticated Remote Command Execution
CVE-2014-2268—05 mar 2014
views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which all
50RIESGO
abrir ↗
Metasploit300
Joomla weblinks-categories Unauthenticated SQL Injection Arbitrary File Read
CVE-2014-7981—02 mar 2014
SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers to execute arbitrary SQL
18RIESGO
abrir ↗
Metasploit300
Oracle Demantra Database Credentials Leak
CVE-2013-5795—28 feb 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0
50RIESGO
abrir ↗
Metasploit300
Oracle Demantra Arbitrary File Retrieval with Authentication Bypass
CVE-2013-5880—28 feb 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.
50RIESGO
abrir ↗
Metasploit300
Oracle Demantra Arbitrary File Retrieval with Authentication Bypass
CVE-2013-5877—28 feb 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0
50RIESGO
abrir ↗
Metasploit300
Oracle Demantra Database Credentials Leak
CVE-2013-5880—28 feb 2014
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.
50RIESGO
abrir ↗
Metasploit300
MantisBT Admin SQL Injection Arbitrary File Read
CVE-2014-2238—28 feb 2014
SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 a
23RIESGO
abrir ↗
Metasploit300
JIRA Issues Collector Directory Traversal
CVE-2014-2314—26 feb 2014
Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers t
43RIESGO
abrir ↗
Metasploit600
Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution
CVE-2013-5015—24 feb 2014
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
43RIESGO
abrir ↗
Metasploit600
Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution
CVE-2013-5014—24 feb 2014
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40
50RIESGO
abrir ↗
Metasploit400
SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write
CVE-2014-100015—22 feb 2014
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write t
50RIESGO
abrir ↗
Metasploit300
Linksys WRT120N tmUnblock Stack Buffer Overflow
CVE-2014-125122MEDIUM19 feb 2014
Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset
28RIESGO
abrir ↗
Metasploit600
Linksys E-Series TheMoon Remote Command Injection
CVE-2025-34037CRITICAL13 feb 2014
Linksys Routers E/WAG/WAP/WES/WET/WRT-Series
85RIESGO
abrir ↗
Metasploit300
MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free
CVE-2014-0322HIGHbajo ataque13 feb 2014
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code v
100RIESGO
abrir ↗
← anteriorpágina 60 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.