Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
81.523exploits catalogados
37.962CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.482Referência 24.284GitHub PoC 15.674VulnCheck XDB 9136Nuclei 4441Metasploit 3506✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
X11R6 3.3.3 - Symlink
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco 7xx Series Router - Denial of Service
Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4 / NT 3.5.1/SP1/SP2/SP3/SP4/SP5 - Screensaver
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon Server 2.71 SP1 - SMTP HELO Argument Buffer Overflow
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HEL
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 7.0 - 'procfs' Denial of Service
64 bit Solaris 7 procfs allows local users to perform a denial of service.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 2.0/3.0/4.0 - ISAPI GetExtensionVersion()
In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7.0 - 'cancel' Local Privilege Escalation
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.6/7.0/8 - 'netpr' Local Buffer Overflow (2)
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
S.u.S.E Linux 5.2 - 'gnuplot' Local Overflow / Local Privilege Escalation
Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xcmail 0.99.6 - Local Buffer Overflow
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail 5.0 - Imapd Buffer Overflow (Denial of Service) (PoC)
Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail 5.0/6.0 - Web Service Buffer Overflow (Denial of Service) (PoC)
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execu
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail 5.0 - IMonitor Buffer Overflow (Denial of Service) (PoC)
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbi
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Debian 2.0 - Super Syslog Buffer Overflow
super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root acce
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Qbik WinGate 3.0/Pro 4.0.1/Standard 4.0.1 - Buffer Overflow (Denial of Service) (PoC)
Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.0/2.1/2.2 - 'autofs' Denial of Service
Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0 SP4 - Known DLL Cache
Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious prog
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Debian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Local Buffer Overflow (2)
A buffer overflow in lsof allows local users to obtain root privilege.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Debian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Local Buffer Overflow (1)
A buffer overflow in lsof allows local users to obtain root privilege.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 4.2.1 - 'snap' Insecure Temporary File Creation
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SmartMax MailMax 1.0 - SMTP Buffer Overflow
Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Allaire Forums 2.0.4 - Getfile
The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 3.0/4.0 - Using ASP and FSO To Read Server Files
FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by s
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (2)
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hancom Office 2007 - 'Reboot.ini' Clear-Text Passwords
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not delet
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WU-FTPD 2.4.2 / SCO Open Server 5.0.5 / ProFTPd 1.2 pre1 - 'realpath' Remote Buffer Overflow (1)
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail 5.0 / Ipswitch WS_FTP Server 1.0.1/1.0.2 - Local Privilege Escalation
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" r
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail 5.0 / Ipswitch WS_FTP Server 1.0.1/1.0.2 - Local Privilege Escalation
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags"
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
S.u.S.E Linux 5.2 - 'lpc' Local Privilege Escalation
SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Site Server 2.0 with IIS 4.0 - Arbitrary File Upload
MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing th
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.