Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magnolia Search Module 2.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Acidcat CMS 2.1.13 - 'acidcat.mdb' Remote Information Disclosure
Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities
SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ContentServ 3.0/3.1/4.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Libertas Enterprise CMS 3.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
allinta CMS 2.3.2 - 'faq.asp?s' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebCal 3.0 4 - 'webcal.cgi' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebGlimpse 2.x - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IHTML Merchant 2.0 - SQL Injection
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IHTML Merchant Mall - SQL Injection
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Arena PAFileDB Extreme Edition - SQL Injection
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'profile.cgi?user' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'toc.pl?board' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PPCal Shopping Cart 3.3 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MarmaraWeb E-Commerce - Remote File Inclusion
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TML 0.5 - 'index.php?form' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dick Copits PDEstore 1.8 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ECTOOLS Onlineshop 1.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kryptronic ClickCartPro 5.1/5.2 - 'CP-APP.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TML 0.5 - 'index.php?id' SQL Injection
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.