Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.331exploits catalogados
40.631CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.377Exploit-DB 24.489GitHub PoC 18.131VulnCheck XDB 10.218Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 - Remote Buffer Overflow (1)
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Newspost 2.0/2.1 - Remote Buffer Overflow
Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to exe
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CitrusDB 0.1/0.2/0.3 Credit Card Data - Remote Information Disclosure
CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xpand Rally 1.0.0.0 (Server/Clients) - Crash
Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ncpfs < 2.2.6 (Gentoo / Linux) - Local Privilege Escalation
ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Vim - 'mch_expand_wildcards()' Heap Buffer Overflow
Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebWasher Classic 2.2/2.3 - HTTP CONNECT Unauthorized Access
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IceWarp Web Mail 5.3 - login.html 'Username' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IceWarp Web Mail 5.3 - 'accountsettings_add.html?accountid' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ngIRCd 0.6/0.7/0.8 - Remote Buffer Overflow
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Winmail Server 4.0 (Build 1112) - 'upload.php' Traversal Arbitrary File Upload
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4 - 'uselib()' Local Privilege Escalation (2)
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.4
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
War FTP Daemon 1.8 - Remote Denial of Service
WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Winmail Server 4.0 (Build 1112) - 'download.php' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Berlios GPSD 2.7.x - Remote Format String
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NullSoft Winamp 5.0.x - Variant 'IN_CDDA.dll' Remote Buffer Overflow (PoC)
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - '.ANI' Downloader (MS05-002)
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Window
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Golden FTP Server 2.02b - Remote Buffer Overflow
Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long R
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - '.ANI' Universal (MS05-002)
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Window
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.3.7 - 'mRouter' Local Privilege Escalation
Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.3.7 - Input Validation Flaw 'parse_machfile()' Denial of Service
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
konversation irc client 0.15 - Multiple Vulnerabilities
The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel nam
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Siteman 1.1 - User Database Privilege Escalation (1)
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Siteman 1.1 - User Database Privilege Escalation (2)
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NodeManager Professional 2.00 - Remote Buffer Overflow
Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GeoBlog 1.0 - 'viewcat.php' SQL Injection
SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iTunes - Playlist Parsing Local Buffer Overflow
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2)
50RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.