Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Subscribe Me Pro 2.44 - S.pl Directory Traversal
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N WebAdmin 2.0.4 - USER Buffer Overflow (Metasploit)
Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to We
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PhpTagCool 1.0.3 - SQL Injection
SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Mailutils imap4d 0.6 - 'Search' Remote Format String
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to e
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zebedee 2.4.1 - Remote Denial of Service
Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (applica
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - SCSI ProcFS Denial of Service
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'print.php?id' SQL Injection
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'startup.php' Cookie SQL Injection
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Stylemotion WEB//NEWS 1.4 - 'news.php' Multiple SQL Injections
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PBLang 4.65 Bulletin Board System - 'SetCookie.php' Directory Traversal
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attacker
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 12.x - Firewall Authentication Proxy Buffer Overflow
Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 an
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - CSRSS Privilege Escalation (MS05-018)
Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000,
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.5.3 - 'Description' HTML Injection
Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BNBT BitTorrent EasyTracker 7.7r3 - Denial of Service
The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to ca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MAXdev MD-Pro 1.0.73 - Arbitrary File Upload
The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dan
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
man2web 0.88 - Multiple Remote Command Executions (2)
man2web allows remote attackers to execute arbitrary commands via -P arguments.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FileZilla 2.2.15 - FTP Client Hard-Coded Cipher Key
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Free SMTP Server 2.2 - Spam Filter
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WhitSoft Development SlimFTPd 3.17 - Remote Denial of Service
SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, p
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Frox 0.7.18 - Arbitrary Configuration File Access
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which cou
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Multiple Remote s
SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Indiatimes Messenger 6.0 - Remote Buffer Overflow
Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (applic
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FlatNuke 2.5.6 - 'ID' Directory Traversal
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DameWare Mini Remote Control 4.0 < 4.9 - Client Agent Remote Overflow
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary c
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FlatNuke 2.5.6 - 'USR' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CMS Made Simple 0.10 - 'Lang.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with V
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager 7.50 - Remote Command Execution
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metach
100RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.