Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
78.324exploits catalogados
36.054CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x - 'announcement.php?cid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x - 'news.php?cid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arb
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DCP-Portal 3.7/4.x/5.x - 'calendar.php' HTTP Response Splitting
CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP res
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Icecast 2.0.1 (Win32) - Remote Code Execution (1)
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPSwitch WhatsUp Gold 8.03 - Remote Buffer Overflow
Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xedus Web Server 1.0 - Traversal Arbitrary File Access
Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.1.6 - 'a redir_url.php?key' SQL Injection
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Silent Storm Portal - Multiple Vulnerabilities
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xedus Web Server 1.0 - testgetrequest.x 'Username' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.1.6a - 'login.php?loginuser' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xedus Web Server 1.0 - test.x 'Username' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML vi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.1.6a - 'subscribe_thread.php' HTTP Response Splitting
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.1.6 - 'a download_thread.php?thread' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.1.6 - 'a forgot_password.php?userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MSSQL 7.0 - Remote Denial of Service
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long requ
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 1.2 - 'edit.php?s' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 1.2 - 'bookmarklet.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 1.2 - 'categories.php?cat_ID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 1.2 - 'edit-comments.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 1.2 - 'admin-header.php?redirect_url' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 1.2 - 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zinf Audio Player 2.2.1 - Local Buffer Overflow
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
S9Y Serendipity 0.7-beta1 - SQL Injection
SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
@lexPHPTeam @lex Guestbook 3.12 - PHP Remote File Inclusion
PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (4)
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (2)
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (1)
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (3)
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - JPEG GDI+ Bind/Reverse/Admin/File Download
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlu
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MyServer 0.7.1 - 'POST' Denial of Service
myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.