Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
77.900exploits catalogados
35.840CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8722Nuclei 4320Metasploit 3477✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Web4Future eDating Professional 5.0 - 'articles.php?cat' SQL Injection
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SAMEDIA LandShop 0.6.3 - 'ls.php' Multiple SQL Injections
SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Search System 1.1 - 'search.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WIDCOMM Bluetooth Software < 3.0 - Remote Buffer Overflow
The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetoot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DoceboLms 2.0.4 - 'connector.php' Arbitrary File Upload
Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alisveristr E-Commerce Login - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and pos
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPYellowTM 5.33 - 'print_me.php?ckey' SQL Injection
Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solupress News 1.0 - 'search.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPYellowTM 5.33 - 'search_result.php?haystack' SQL Injection
Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execut
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'adv_search.asp?srch_product_name' Cross-Site Scripting
Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
sobexsrv 1.0.0_pre3 Bluetooth - 'syslog()' Remote Format String
Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'bsearch.asp?b_search' Cross-Site Scripting
Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SiteBeater News 4.0 - 'Archive.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion 6.0.109 - 'messages.php' SQL Injection
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information an
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'ViewItem.php?ItemNum' SQL Injection
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to inj
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zen Cart 1.2.6d - 'password_forgotten.php' SQL Injection
SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WinEggDropShell 1.7 - Multiple Remote Stack Overflows (PoC)
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 - 'gallery.php?CatID' SQL Injection
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Edgewall Software Trac 0.9 Ticket Query Module - SQL Injection
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/2003 - CreateRemoteThread Local Denial of Service
NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyChat 0.14.6 - 'users_popupL.php?From' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DotClear 1.2.1/1.2.2 - 'Session.php' SQL Injection
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - DTC Remote (MS05-051) (2)
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servic
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyChat 0.14.6 - 'style.css.php?medium' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lore 1.5.4/1.5.6 - 'article.php' SQL Injection
SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting
CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP heade
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - DTC Remote (MS05-051) (2)
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) alloca
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyChat 0.14.6 - 'start_page.css.php?medium' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Extreme Corporate 6.0 - 'Extremesearch.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.