Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
78.102exploits catalogados
35.951CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.407VulnCheck XDB 8755Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 - Remote Buffer Overflow (2)
Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP G
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpLDAPadmin 0.9.6/0.9.7 - 'welcome.php' Arbitrary File Inclusion
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitra
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager 7.50 - Remote Command Execution
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metach
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Version Cue 1.0/1.0.1 (OSX) - Local Privilege Escalation
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with V
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Land Down Under 700/701/800/801 - 'events.php?c' SQL Injection
Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebNotes 2.0 - 'Api.php' Remote File Inclusion
php_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as $t_path_core, which leads to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Land Down Under 700/701/800/801 - 'list.php' Multiple SQL Injections
Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Battlefield (BFCC < 1.22_A /BFVCC < 2.14_B / BF2CC) - Authentication Bypass / Password Stealer / Denial of Service
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion 4.0/5.0/6.0 - BBCode URL Tag Script Injection
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Land Down Under 700/701/800/801 - 'index.php?c' SQL Injection
Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
bfcommand & control server 1.22/2.0/2.14 manager - Multiple Vulnerabilities
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to cau
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Autolinks 2.1 Pro - 'Al_initialize.php' Remote File Inclusion
PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SqWebMail 5.0.4 - HTML Email IMG Tag Script Injection
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to injec
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 2.x - 'error.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Looking Glass 20040427 - Remote Command Execution
Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access
The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Plug-and-Play Service - Remote Universal (Spanish) (MS05-039)
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
QNX RTOS 6.1/6.3 - InputTrap Local Arbitrary File Disclosure
The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LeapFTP Client 2.7.3/2.7.4 - '.LSQ' File Remote Buffer Overflow (PoC)
Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.ls
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Foojan PHPWeblog - Html Injection
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ventrilo 2.3.0 (All Platforms) - Remote Denial of Service
Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status packe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKit 1.6.1 - 'member.php' SQL Injection
Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercora IMRadio 4.0.0.0 - Local Password Disclosure
Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which al
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.76 RC4b Comments Module - 'moderate' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.00 RC4 - 'search.php' SQL Injection
SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.75/0.76 DL - 'viewdownload.php' SQL Injection
SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.76 RC4b - 'user.php?htmltext' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.2.3 for Mac OS - Denial of Service
Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web page
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ZipTorrent 1.3.7.3 - Local Proxy Password Disclosure
ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Elm < 2.5.8 - Expires Header Remote Buffer Overflow
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attacker
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.