Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados
39.298CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
3523 exploits
Metasploit300
Java CMM Remote Code Execution
CVE-2013-1493—01 mar 2013
The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and
60RIESGO
abrir ↗
Metasploit300
Mac OS X Sudo Password Bypass
CVE-2013-1775—28 feb 2013
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypas
38RIESGO
abrir ↗
Metasploit100
Sami FTP Server LIST Command Buffer Overflow
CVE-2008-5106—27 feb 2013
Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) a
23RIESGO
abrir ↗
Metasploit600
Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload Vulnerability
CVE-2013-10066CRITICAL22 feb 2013
Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload
63RIESGO
abrir ↗
Metasploit600
Honeywell HSC Remote Deployer ActiveX Remote Code Execution
CVE-2013-0108—22 feb 2013
An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R
43RIESGO
abrir ↗
Metasploit600
Nagios Remote Plugin Executor Arbitrary Command Execution
CVE-2013-1362—21 feb 2013
Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote att
50RIESGO
abrir ↗
Metasploit0
Netgear DGN2200B pppoe.cgi Remote Command Execution
CVE-2013-10060CRITICAL15 feb 2013
Netgear Routers pppoe.cgi RCE
63RIESGO
abrir ↗
Metasploit600
OpenEMR PHP File Upload Vulnerability
CVE-2009-4140—13 feb 2013
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer
60RIESGO
abrir ↗
Metasploit200
MS13-009 Microsoft Internet Explorer SLayoutRun Use-After-Free
CVE-2013-0025—13 feb 2013
Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a cr
50RIESGO
abrir ↗
Metasploit600
Linksys WRT160nv2 apply.cgi Remote Command Injection
CVE-2013-10058HIGH11 feb 2013
Linksys Routers apply.cgi Remote Command Injection
36RIESGO
abrir ↗
Metasploit300
D-Link authentication.cgi Buffer Overflow
CVE-2013-7389—08 feb 2013
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allo
43RIESGO
abrir ↗
Metasploit300
D-Link hedwig.cgi Buffer Overflow in Cookie Header
CVE-2013-7389—08 feb 2013
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allo
43RIESGO
abrir ↗
Metasploit300
Adobe Flash Player Regular Expression Heap Overflow
CVE-2013-0634—08 feb 2013
Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x
60RIESGO
abrir ↗
Metasploit600
D-Link DIR615h OS Command Injection
CVE-2013-10059HIGH07 feb 2013
D-Link Routers tools_vct.htm OS Command Injection
41RIESGO
abrir ↗
Metasploit600
Netgear DGN1000B setup.cgi Remote Command Execution
CVE-2013-10061HIGH06 feb 2013
Netgear Routers setup.cgi RCE
36RIESGO
abrir ↗
Metasploit300
OpenSSL TLS 1.1 and 1.2 AES-NI DoS
CVE-2012-2686—05 feb 2013
crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 bef
30RIESGO
abrir ↗
Metasploit600
Linksys E1500/E2500 apply.cgi Remote Command Injection
CVE-2018-3953HIGH05 feb 2013
Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version
41RIESGO
abrir ↗
Metasploit300
Linksys E1500/E2500 Remote Command Execution
CVE-2018-3953HIGH05 feb 2013
Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version
41RIESGO
abrir ↗
Metasploit600
Glossword v1.8.8 - 1.8.12 Arbitrary File Upload Vulnerability
CVE-2013-10067CRITICAL05 feb 2013
Glossword 1.8.8 - 1.8.12 Arbitrary File Upload RCE
43RIESGO
abrir ↗
Metasploit300
ActFax 5.01 RAW Server Buffer Overflow
CVE-2013-10064CRITICAL05 feb 2013
ActFax 5.01 RAW Server Buffer Overflow
63RIESGO
abrir ↗
Metasploit600
D-Link Devices Unauthenticated Remote Command Execution
CVE-2013-10048CRITICAL04 feb 2013
D-Link Devices command.php Unauthenticated RCE
68RIESGO
abrir ↗
Metasploit0
Raidsonic NAS Devices Unauthenticated Remote Command Execution
CVE-2013-10049CRITICAL04 feb 2013
Raidsonic NAS Devices Unauthenticated Remote Command Execution
63RIESGO
abrir ↗
Metasploit300
D-Link DIR-600 / DIR-300 Unauthenticated Remote Command Execution
CVE-2013-10069CRITICAL04 feb 2013
D-Link Devices Unauthenticated RCE
68RIESGO
abrir ↗
Metasploit600
SCADA 3S CoDeSys Gateway Server Directory Traversal
CVE-2012-4705—02 feb 2013
Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitr
50RIESGO
abrir ↗
Metasploit600
D-Link Unauthenticated Remote Command Execution using UPnP via a special crafted M-SEARCH packet.
CVE-2023-33625—01 feb 2013
D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability vi
30RIESGO
abrir ↗
Metasploit600
D-Link Unauthenticated Remote Command Execution using UPnP via a special crafted M-SEARCH packet.
CVE-2020-15893—01 feb 2013
An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled b
23RIESGO
abrir ↗
Metasploit600
D-Link Unauthenticated Remote Command Execution using UPnP via a special crafted M-SEARCH packet.
CVE-2019-20215—01 feb 2013
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the
60RIESGO
abrir ↗
Metasploit300
Firebird Relational Database CNCT Group Number Buffer Overflow
CVE-2013-2492—31 ene 2013
Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windo
50RIESGO
abrir ↗
Metasploit300
Novell GroupWise Client gwcls1.dll ActiveX Remote Code Execution
CVE-2012-0439—30 ene 2013
An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows r
50RIESGO
abrir ↗
Metasploit300
Portable UPnP SDK unique_service_name() Remote Code Execution
CVE-2012-5958—29 ene 2013
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable
60RIESGO
abrir ↗
← anteriorpágina 68 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.