Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
78.091exploits catalogados
35.949CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.396VulnCheck XDB 8755Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Land Down Under 800/801 - 'auth.php?m' SQL Injection
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PhpTagCool 1.0.3 - SQL Injection
SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N WebAdmin 2.0.4 - USER Buffer Overflow (Metasploit)
Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to We
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Mailutils imap4d 0.6 - 'Search' Remote Format String
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to e
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zebedee 2.4.1 - Remote Denial of Service
Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (applica
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - SCSI ProcFS Denial of Service
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'startup.php' Cookie SQL Injection
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'print.php?id' SQL Injection
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'news.php' Multiple SQL Injections
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PBLang 4.65 Bulletin Board System - 'SetCookie.php' Directory Traversal
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 12.x - Firewall Authentication Proxy Buffer Overflow
Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 an
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - CSRSS Privilege Escalation (MS05-018)
Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000,
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BNBT BitTorrent EasyTracker 7.7r3 - Denial of Service
The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to ca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MAXdev MD-Pro 1.0.73 - Arbitrary File Upload
The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dan
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.5.3 - 'Description' HTML Injection
Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
man2web 0.88 - Multiple Remote Command Executions (2)
man2web allows remote attackers to execute arbitrary commands via -P arguments.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Free SMTP Server 2.2 - Spam Filter
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WhitSoft Development SlimFTPd 3.17 - Remote Denial of Service
SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, p
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Frox 0.7.18 - Arbitrary Configuration File Access
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which cou
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FlatNuke 2.5.6 - 'USR' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS Made Simple 0.10 - 'Lang.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DameWare Mini Remote Control 4.0 < 4.9 - Client Agent Remote Overflow
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary c
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FlatNuke 2.5.6 - 'ID' Directory Traversal
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indiatimes Messenger 6.0 - Remote Buffer Overflow
Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (applic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpLDAPadmin 0.9.6/0.9.7 - 'welcome.php' Arbitrary File Inclusion
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitra
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 - Remote Buffer Overflow (2)
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP G
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.