Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat / Geronimo 1.0 - 'Sample Script cal2.jsp?time' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary we
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (2)
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device cr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HomeFtp 1.1 - 'NLST' Denial of Service
Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a lo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ultimate Auction 3.67 - Item.pl Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Farmers WIFE 4.4 sp1 - 'FTP' Remote System Access
Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MiniNuke 1.8.2 - 'hid' SQL Injection
SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MiniNuke 1.8.2 - Multiple SQL Injections
SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alstrasoft Template Seller Pro 3.25 - 'Fullview.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Web Host Automation Ltd. Helm 3.2.8 - 'ForgotPassword.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xmame 0.102 - 'lang' Local Buffer Overflow
Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow loc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Interspire TrackPoint NX - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Visual Studio - UserControl Remote Code Execution (2)
By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserCon
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fog Creek Software FogBugz 4.0 29 - 'default.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Visual Studio - UserControl Remote Code Execution (1)
By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserCon
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (2)
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a lo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eStara SoftPhone 3.0.1.46 - SIP Remote Buffer Overflow (1)
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a lo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TankLogger 2.4 General Functions Script - SQL Injection
SQL injection vulnerability in general_functions.php in TankLogger 2.4 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyPHPim - Login Page pass Field SQL Injection
SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyPHPim - 'calendar.php3?cal_id' SQL Injection
SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 6.4/6.5/7.0.x - PictureViewer '.JPEG'/.PICT' File Buffer Overflow
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a craft
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (1)
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device cr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebWiz Forums - 'Search_form.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Orjinweb - 'index.php' Remote File Inclusion
PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cray UNICOS /usr/bin/script - Command Line Argument Local Overflow
Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cray UNICOS /etc/nu - '-c' Option Filename Processing Local Overflow
Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xmame 0.102 - '-lang' Local Buffer Overflow
Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow loc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hummingbird Collaboration - Crafted URL File Property Obscuration Download
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sudo 1.6.x - Environment Variable Handling Security Bypass (1)
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT e
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.