Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.813exploits catalogados
35.788CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.455 exploits
Exploit-DB✓ VexDay Proof
PHPAlbum 0.2.2/0.2.3/4.1 - 'Language.php' File Inclusion
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tiny Web Gallery 1.4 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit)
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AR-Blog 5.2 - 'print.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Farsinews 2.1/2.5 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MODx CMS 0.9.1 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. (d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Papoo 2.1.x - 'print.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 8.52 - Stylesheet Attribute Buffer Overflow
Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a sty
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W3C Amaya 9.4 - legend color Attribute Value Overflow
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Document Server 6.0 Extensions - 'AlterCast?op' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PowerClan 1.14 - 'member.php' SQL Injection
SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SimpleBBS 1.0.6/1.0.7/1.1 - Arbitrary Command Execution
Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LifeType 1.0.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W3C Amaya 9.4 - textarea rows Attribute Value Overflow
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PlanetSearch + - 'Planetsearchplus.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Document Server 6.0 Extensions - 'ads-readerext?actionID' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to i
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Plone 2.x - MembershipTool Access Control Bypass
Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PatroNet CMS - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in PatroNet CMS allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Guestbook 1.3 - 'index.php' SQL Injection
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Interaktiv.shop 4/5 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tritanium Bulletin Board 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JetPhoto 1.0/2.0/2.1 - 'thumbnail.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JetPhoto 1.0/2.0/2.1 - 'gallery.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKIT 1.6.1 R2 - 'Include.php' SQL Injection
SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Saxopress - 'URL' Directory Traversal
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SWSoft Confixx 3.1.2 - 'Jahr' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JetPhoto 1.0/2.0/2.1 - 'detail.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Clever Copy 3.0 - 'Connect.INC' Information Disclosure
Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.