Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.464exploits catalogados
40.695CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
Protector System 1.15 b1 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection filt
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Advanced Guestbook 2.2 - 'Password' SQL Injection
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.5.x/2.6.x - CPUFreq Proc Handler Integer Handling Memory Read
Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain pr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Protector System 1.15 - 'blocker_query.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (4)
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000 - TCP Connection Reset
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Epic Games Unreal Tournament Engine 3 - UMOD Manifest.INI Arbitrary File Overwrite
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xine 0.9.x and Xine-Lib 1 - Multiple Remote File Overwrite Vulnerabilities
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - SSL Remote Buffer Overflow (MS04-011)
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as u
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.3 - 'setsockopt' Local Denial of Service
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows loca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke Phoenix 0.726 - 'openwindow.php?hlpfile' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (3)
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SquirrelMail - 'chpasswd' Local Buffer Overflow
Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local us
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTP Server 3.x/4.x/5.0 - 'LIST' Buffer Overflow
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a l
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Vendor - TCP Sequence Number Approximation (2)
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial o
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Kinesphere Corporation Exchange POP3 4.0/5.0 - Remote Buffer Overflow
Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.x - 'album_portal.php' Remote File Inclusion
PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to e
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UTempter 0.5.x - Multiple Local Vulnerabilities
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softwin BitDefender - AvxScanOnlineCtrl COM Object Arbitrary File Upload / Execution
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 3.4.x - Phorum_URIAuth SQL Injection
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Softwin BitDefender - AvxScanOnlineCtrl COM Object Information Disclosure
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - Local Descriptor Table Privilege Escalation (MS04-011)
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Win
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Macromedia ColdFusion MX 6.0 - Oversized Error Message Denial of Service
Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WinZip - MIME Parsing Overflow
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, all
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SCT Campus Pipeline 1.0/2.x/3.x - Email Attachment Script Injection
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Real Networks Helix Universal Server 9.0.x - Denial of Service
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via mal
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gemitel 3.50 - '/affich.php' Remote File Inclusion / Command Injection
PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Utility Manager - Local Privilege Escalation (MS04-011)
The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 6.0.3 - MIME Message Nesting Denial of Service
Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multip
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rhino Software Zaep AntiSpam 2.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.