Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
78.070exploits catalogados
35.928CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8755Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MX Shop 3.2 - 'index.php' Multiple SQL Injections
SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/language.php?goto' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EPay Pro 2.0 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/modlog.php?orderby' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/css.php?group' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/user.php?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 1.x/2.0.1 - Data URI Memory Corruption
Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.4.0 - Shell Injection / Remote Command Execution
Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and ea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fastream NETFile Web Server 7.1.2 - 'HEAD' Denial of Service
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'newpost.php' SQL Injection
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpWebSite 0.10.0 - 'module' SQL Injection
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'topic.php' SQL Injection
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AEwebworks aeDating 3.2/4.0 - 'search_result.php' SQL Injection
SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpWebSite 0.10.0 - 'module' SQL Injection
SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'misc.php' SQL Injection
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'forums.php' SQL Injection
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.0 - 'pm.php' SQL Injection
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TWiki TWikiUsers - Arbitrary Command Execution
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary co
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireless Tools 26 (IWConfig) - Local Privilege Escalation
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 1.5.1 - 'password_reminder.php' SQL Injection
SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 1.5.1 - Chat Logs Remote Information Disclosure
ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient ac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wireless Tools 26 (IWConfig) - Local Privilege Escalation
Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.2/1.3 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Land Down Under 800/801 - 'auth.php?m' SQL Injection
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Land Down Under 800/801 - 'plug.php?e' SQL Injection
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Subscribe Me Pro 2.44 - S.pl Directory Traversal
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AzDGDatingLite 2.1.3 - Remote Code Execution
Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows rem
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.