Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.866exploits catalogados
35.812CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
JGS-Gallery 4.0 - 'Board jgs_galerie_scroll.php?userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burnin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NOCC Webmail 1.0 - Local File Inclusion / Remote Code Execution
Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - Arbitrary File Upload
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Web Calendar Pro - 'Dropbase.php' SQL Injection
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NOCC 1.0 - 'html_bottom_table.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oi! Email Marketing System 3.0 - 'index.php' SQL Injection
Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, wh
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Web_Links Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
myPHPNuke 1.8.8 - 'download.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player - Plugin Overflow (MS06-006) (3)
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Inter
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.0/1.3 - Search Page SQL Injection
SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - Remote Denial of Service
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumptio
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.0/1.3 - Local File Inclusion
Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6 1 News Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Surveys Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
myPHPNuke 1.8.8 - 'reviews.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.0/1.3 - 'index.php' Remote File Inclusion
Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Downloads Module - 'c' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Stories_Archive Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RunCMS 1.x - 'Ratefile.php' Cross-Site Scripting
Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6 1 Your_Account Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla (Multiple Products) - iFrame JavaScript Execution
The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.0/1.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Coppermine Module - 'album' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.6x/0.7x NS-Languages Module - 'language' Cross-Site Scripting
Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) atta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.6x/0.7x NS-Languages Module - 'language' SQL Injection
SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Calendar Lite 1.02 - 'index.php' SQL Injection
Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc disabled, all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TTS Software Time Tracking Software 3.0 - 'edituser.php' Access Validation
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PunBB 2.0.10 - Register Multiple Users Denial of Service
register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PunBB 2.0.10 - Register Multiple Users Denial of Service
PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.4.1 - 'show_news.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.