Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
Apache - Arbitrary Long HTTP Headers (Denial of Service)
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memor
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Flash FTP Server - Directory Traversal
Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Conceptronic CADSLR1 Router - Denial of Service
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Leigh Business Enterprises Web HelpDesk 4.0 - SQL Injection
SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Serena TeamTrack 6.1.1 - Remote Authentication Bypass
Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and databas
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Polar Helpdesk 3.0 - Cookie Based Authentication Bypass
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cooki
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection
SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Layton Technology HelpBox 3.0.1 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Medal of Honor - Remote Buffer Overflow (PoC)
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spe
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCI Photo Chat 3.4.9 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
British National Corpus SARA - Remote Buffer Overflow
Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - Utility Manager All-in-One (MS04-019)
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which all
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCO Multi-channel Memorandum Distribution Facility - Multiple Vulnerabilities
Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.3 - Comment HTML Injection
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in Cu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Outblaze Webmail - HTML Injection
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTM
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion Database Backup - Information Disclosure
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups direct
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Task Scheduler (XP/2000) - '.job' (MS04-022)
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, al
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Unreal Tournament 2004 - 'Secure' Remote Overflow (Metasploit)
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - 'calendar.html?schedule' SQL Injection
SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - 'settings.html' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gallery 1.4.4 - Remote Server-Side Script Execution
The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - Universal Language Utility Manager (MS04-019)
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which all
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - POSIX Subsystem Privilege Escalation (MS04-020)
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which all
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - address.html Full Path Disclosure
The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sens
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - HTML Message Body Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - 'attachment.html?attachmentpage_text_error' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Merak Mail Server 7.4.5 - 'address.html' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in Cu
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RaXnet Cacti 0.6.x/0.8.x - 'Auth_Login.php' SQL Injection
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.