Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'basket.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'product_details.php?category_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'links_popular.asp' SQL Injection
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'dl_toprated.asp' SQL Injection
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'products.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'reviews.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GlobalScape Secure FTP Server 3.0 - Remote Buffer Overflow
Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ARPUS/Ce - Local Overflow (setuid)
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Keyvan1 ImageGallery - Database Disclosure
Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ARPUS/Ce - Local File Overwrite (setuid)
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1 - 'ID' SQL Injection
SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 10.x - ESRI Arcgis Format String Privilege Escalation
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Snmppd - SNMP Proxy Daemon Remote Format String
Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote at
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BulletProof FTP Server 2.4.0.31 - Local Privilege Escalation
BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Golden FTP Server Pro 2.52 - Remote Buffer Overflow (3)
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Golden FTP Server Pro 2.52 - Remote Buffer Overflow (2)
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Golden FTP Server Pro 2.52 - Remote Buffer Overflow (1)
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NotJustBrowsing 1.0.3 - Local Password Disclosure
NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Just William's Amazon Webstore - 'CurrentNumber' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Application Server 9i - Webcache Cache_dump_file Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpCOIN 1.2 Pages Module - Multiple SQL Injections
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Just William's Amazon Webstore - 'searchFor' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpCOIN 1.2 - 'login.php?PHPcoinsessid' SQL Injection
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Radia Management Portal 1.0/2.0 - Remote Command Execution
Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows re
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Just William's Amazon Webstore - 'Closeup.php?Image' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Application Server 9i Webcache - Arbitrary File Corruption
The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GoText 1.01 - Local User Informations Disclosure
StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoTex
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.