Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX Adobe Version Cue - Local Privilege Escalation
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Battlefield 1942 1.6.19 + Vietnam 1.2 - Broadcast Client Crash
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MD5 - Message Digest Algorithm Hash Collision
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to co
53RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
darryl burgdorf weblibs 1.0 - Directory Traversal
Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. se
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KDE FTP - KIOSlave URI Arbitrary FTP Server Command Execution
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - FTP URI Arbitrary FTP Server Command Execution
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NapShare 1.2 - Remote Buffer Overflow (1)
Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows re
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GetRight 5.2a - '.grs' Skin File Buffer Overflow
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows S
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PAFileDB 3.1 - Error Message Full Path Disclosure
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Blog Torrent 0.8 - Directory Traversal
Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kreed 1.05 - Format String / Denial of Service
Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kreed 1.05 - Format String / Denial of Service
The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server fr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Advanced Guestbook 2.2/2.3 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kreed 1.05 - Format String / Denial of Service
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format speci
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RSSH 2.x - Arbitrary Command Execution
rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01a - 'check' Buffer Overflow
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01a - 'check' Buffer Overflow
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (2)
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (2)
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aspell (word-list-compress) - Command Line Stack Overflow
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPCop 1.4.1 - Web Administration Interface Proxy Log HTML Injection
Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (1)
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (1)
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Orbz Game 2.10 - Remote Buffer Overflow (PoC)
Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and po
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WS_FTP Server 5.03 - MKD Remote Buffer Overflow
Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WS_FTP Server 5.03 - 'RNFR' Buffer Overflow
Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDT
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01 - 'Pegasus' IMAP Buffer Overflow (3)
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
File ELF 4.x - Header Buffer Overflow
Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary cod
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.