Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.772exploits catalogados
35.760CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8710Nuclei 4319Metasploit 3476✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
Buffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to ca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'diapo.php?rep' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'affich.php?image' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Traversal Arbitrary Directory Listing
Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/ToolResults.asp?sHostname' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Foing 0.7.0 - 'phpBB' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.20 - Unauthorized HTTP Proxy
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/Navigation.asp?sDeviceView' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OZJournals 1.2 - 'Vname' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vizra - 'A_Login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in a_login.php in Vizra allows remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, wh
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier ve
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Geeklog 1.4 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU BinUtils 2.1x - Buffer Overflow
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU
46RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Path Conversion
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Infotech Storage Library - Heap Corruption
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to exe
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EDirectoryPro - 'Search_result.asp' SQL Injection
SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ISPConfig 2.2.2/2.2.3 - 'Session.INC.php' Remote File Inclusion
PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EPublisherPro 0.9.7 - 'Moreinfo.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary we
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EImagePro - 'subList.asp?CatID' SQL Injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection
SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.1.1 - 'showthread.php' SQL Injection
SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EImagePro - 'view.asp?Pic' SQL Injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Intel Wireless Service - 's24evmon.exe' Shared Memory
S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memory
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.