Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.168exploits catalogados
40.553CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4567Metasploit 3537✓ solo verificadosrecientespopularesriesgo
24.488 exploits
Exploit-DB✓ VexDay Proof
Dvbbs 7.1/8.2 - 'boardhelp.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Lite Calendar Express 2.2 - 'auth.php?cid' SQL Injection
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Lite Calendar Express 2.2 - 'login.php?cid' SQL Injection
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dvbbs 7.1/8.2 - 'dispuser.asp?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FunkBoard 0.66 - 'editpost.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FunkBoard 0.66 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FunkBoard 0.66 - 'reply.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flatnuke 2.5.5 - Remote Code Execution
CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gravity Board X 1.1 - Login SQL Injection
SQL injection vulnerability in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary SQL commands and b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FunkBoard 0.66 - 'profile.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FunkBoard 0.66 - 'newtopic.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion 4.0/5.0/6.0 - 'messages.php' SQL Injection
SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ethereal 10.x - AFP Protocol Dissector Remote Format String
Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax PHP Scripts 1.0/1.34/2.14/3.31 - logfile.csv User IP Disclosure
Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
nbSMTP 0.99 - 'util.c' Client-Side Command Execution
Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FlatNuke 2.5.5 - 'structure.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EMC Navisphere Manager 6.x - Directory Traversal / Information Disclosure
Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FlatNuke 2.5.5 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax PHP Scripts 1.0/1.34/2.14/3.31 - guestbook_ips2block Banned IP List Disclosure
Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax PHP Scripts 1.0/1.34/2.14/3.31 - ips2block Banned IP List Disclosure
Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL Eventum 1.5.5 - 'login.php' SQL Injection
Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax PHP Scripts 1.0/1.34/2.14/3.31 - Guestbook File Client IP Disclosure
Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Jax PHP Scripts 1.0/1.34/2.14/3.31 - 'jax_linklists.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in jax_linklists.php in Jack (tR) Jax LinkLists 1.00 allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Comdev eCommerce 3.0 - 'WCE.download.php' Directory Traversal
Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetworkActiv Web Server 1.0/2.0/3.0/3.5 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly othe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2.4 - 'index.php' SQL Injection
SQL injection vulnerability in mod_forum/read_message.php in PortailPHP allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve Backup - Remote Overflow
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Web Content Management - 'list.php?strTable' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Web Content Management - 'validsession.php?strRootpath' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve Backup Agent - 'dbasqlr.exe' Remote Overflow
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Ser
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.