Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados
39.298CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
3523 exploits
Metasploit500
Java Applet ProviderSkeleton Insecure Invoke Method
CVE-2013-2460—18 jun 2013
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and
60RIESGO
abrir ↗
Metasploit600
Havalite CMS Arbitary File Upload Vulnerability
CVE-2013-10055CRITICAL17 jun 2013
Havalite CMS Arbitary File Upload RCE
63RIESGO
abrir ↗
Metasploit600
LibrettoCMS File Manager Arbitary File Upload Vulnerability
CVE-2013-10054CRITICAL14 jun 2013
LibrettoCMS File Manager Arbitrary File Upload
63RIESGO
abrir ↗
Metasploit600
HP System Management Homepage JustGetSNMPQueue Command Injection
CVE-2013-3576—11 jun 2013
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands vi
50RIESGO
abrir ↗
Metasploit600
ZPanel zsudo Local Privilege Escalation Exploit
CVE-2013-10052HIGH07 jun 2013
ZPanel zsudo Local Privilege Escalation
36RIESGO
abrir ↗
Metasploit600
ZPanel 10.0.0.2 htpasswd Module Username Command Execution
CVE-2013-10053HIGH07 jun 2013
ZPanel <= 10.0.0.2 htpasswd Module Username Command Execution
36RIESGO
abrir ↗
Metasploit600
Foreman (Red Hat OpenStack/Satellite) bookmarks/create Code Injection
CVE-2013-2121—06 jun 2013
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote
43RIESGO
abrir ↗
Metasploit300
Foreman (Red Hat OpenStack/Satellite) users/create Mass Assignment
CVE-2013-2113—06 jun 2013
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users w
43RIESGO
abrir ↗
Metasploit600
Netgear DGN1000 Setup.cgi Unauthenticated RCE
CVE-2024-12847CRITICAL05 jun 2013
NETGEAR DGN setup.cgi OS Command Injection
68RIESGO
abrir ↗
Metasploit300
HP Data Protector Cell Request Service Buffer Overflow
CVE-2013-2333—03 jun 2013
Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arb
60RIESGO
abrir ↗
Metasploit300
Monkey HTTPD Header Parsing Denial of Service (DoS)
CVE-2013-3843—30 may 2013
Stack-based buffer overflow in the mk_request_header_process function in mk_request.c in Monkey HTTP Daemon (monkeyd) be
23RIESGO
abrir ↗
Metasploit0
Intrasrv 1.0 Buffer Overflow
CVE-2019-17181—30 may 2013
A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET o
30RIESGO
abrir ↗
Metasploit300
Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow
CVE-2013-10057HIGH30 may 2013
Synactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer Overflow
36RIESGO
abrir ↗
Metasploit500
Apache Struts includeParams Remote Code Execution
CVE-2013-2115—24 may 2013
Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not
60RIESGO
abrir ↗
Metasploit500
Apache Struts includeParams Remote Code Execution
CVE-2013-1966—24 may 2013
Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not
60RIESGO
abrir ↗
Metasploit300
ERS Viewer 2013 ERS File Handling Buffer Overflow
CVE-2013-3482—23 may 2013
Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.
50RIESGO
abrir ↗
Metasploit300
Lianja SQL 1.0.0RC5.1 db_netserver Stack Buffer Overflow
CVE-2013-3563—22 may 2013
Stack-based buffer overflow in db_netserver in Lianja SQL Server before 1.0.0RC5.2 allows remote attackers to cause a de
50RIESGO
abrir ↗
Metasploit200
Novell Client 2 SP3 nicm.sys Local Privilege Escalation
CVE-2013-3956—22 may 2013
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2
38RIESGO
abrir ↗
Metasploit600
Java JMX Server Insecure Configuration Java Code Execution
CVE-2015-2342—22 may 2013
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r
60RIESGO
abrir ↗
Metasploit300
Java JMX Server Insecure Endpoint Code Execution Scanner
CVE-2015-2342—22 may 2013
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r
60RIESGO
abrir ↗
Metasploit300
Apple Quicktime 7 Invalid Atom Length Buffer Overflow
CVE-2013-1017—22 may 2013
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of s
50RIESGO
abrir ↗
Metasploit300
Apple Quicktime 7 Invalid Atom Length Buffer Overflow
CVE-2013-1017—22 may 2013
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of s
50RIESGO
abrir ↗
Metasploit200
Kimai v0.9.2 'db_restore.php' SQL Injection
CVE-2013-10033CRITICAL21 may 2013
Kimai 0.9.2 db_restore.php SQL Injection
63RIESGO
abrir ↗
Metasploit300
Mutiny 5 Arbitrary File Read and Delete
CVE-2013-0136—15 may 2013
Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow
50RIESGO
abrir ↗
Metasploit600
Mutiny 5 Arbitrary File Upload
CVE-2013-0136—15 may 2013
Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow
50RIESGO
abrir ↗
Metasploit600
VMware vCenter Chargeback Manager ImageUploadServlet Arbitrary File Upload
CVE-2013-3520—15 may 2013
VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers t
50RIESGO
abrir ↗
Metasploit200
Windows EPATHOBJ::pprFlattenRec Local Privilege Escalation
CVE-2013-3660HIGHbajo ataque15 may 2013
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windo
98RIESGO
abrir ↗
Metasploit600
Firefox toString console.time Privileged Javascript Injection
CVE-2013-1710—14 may 2013
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird befo
50RIESGO
abrir ↗
Metasploit500
AdobeCollabSync Buffer Overflow Adobe Reader X Sandbox Bypass
CVE-2013-2730—14 may 2013
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attacke
60RIESGO
abrir ↗
Metasploit300
ColdFusion 'password.properties' Hash Extraction
CVE-2013-3336—07 may 2013
Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files
60RIESGO
abrir ↗
← anteriorpágina 66 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.