Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9134Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
David Bagley xlock 4.16 - User Supplied Format String (1)
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privile
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Luca Deri ntop 1.2 a7-9/1.3.1 - Remote Buffer Overflow
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - 'telnet.exe' NTLM Authentication
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capt
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (2)
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "T
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (1)
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "T
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow
Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multisoft FlagShip 4.4 - Installation Permission
The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows lo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun AnswerBook2 1.4.2/1.4.3/1.4.4 - Administration Interface Access
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aptis Software TotalBill 3.0 - Remote Command Execution
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privil
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris AnswerBook2 - Remote Command Execution
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execut
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SUIDPerl 5.00503 - Mail Shell Escape (2)
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SUIDPerl 5.00503 - Mail Shell Escape (1)
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (3)
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, wh
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape Communicator 4.x - URL Read
Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java ap
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which al
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NAI Net Tools PKI Server 1.0 - 'strong.exe' Remote Buffer Overflow
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IRIX 6.5.x - '/usr/sbin/dmplay' Local Buffer Overflow
Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NAI Net Tools PKI Server 1.0 - Format String
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
nai net tools pki server 1.0 - Directory Traversal
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tech-Source Raptor GFX PGX32 2.3.1 - Config Tool
Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Luca Deri ntop 1.2 a7-9 - Unauthorized File Retrieval
ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tech-Source Raptor GFX PGX32 2.3.1 - Config Tool
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - Named Pipes Predictability
The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with consol
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mandrake 7.0/7.1 / RedHat Kon2 0.3.9 - '/usr/bin/fld' Input File Overflow
Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - NetBIOS Name Conflict
The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Weblogic 3.1.8/4.0.4/4.5.1 - Remote Command Execution
BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to co
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String (2)
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, wh
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CVS Kit CVS Server 1.10.8 - Instructed File Create
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Conectiva 4.x/5.x / RedHat 6.x - pam_console Remote User
pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AnalogX SimpleServer:WWW 1.0.6 - Directory Traversal
AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) at
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.