Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
78.794exploits catalogados
36.057CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
PSOProxy 0.91 (Windows 2000/XP) - Remote Buffer Overflow
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (2)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (1)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (3)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - MDTM Command Time Argument Buffer Overflow (4)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper Pro 4.7 - Web proxy Remote Buffer Overflow
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MTools 3.9.x - 'MFormat' Local Privilege Escalation
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permission
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Cygwin 1.3.x/2.0.x - Directory Traversal
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RobotFTP Server 1.0/2.0 - Remote Denial of Service
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedStorm Ghost Recon Game Engine - Remote Denial of Service
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GWeb HTTP Server 0.5/0.6 - Directory Traversal
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain priv
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EZBoard 7.3 - Font Tag HTML Injection
Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary sc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpNewsManager 1.36 - functions Script File Disclosure
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samhain Labs 1.x - HSFTP Remote Format String
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly ex
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper 4.7 Web Proxy - Buffer Overrun
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell TrueMobile 1300 WLAN System 3.10.39.0 Tray Applet - Local Privilege Escalation
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LGames LBreakout2 2.2.2 - Multiple Environment Variable Buffer Overflow Vulnerabilities
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (3)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (1)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
TYPSoft FTP Server 1.1 - Remote CPU Consumption (Denial of Service)
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arg
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (2)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eCommerce Corporation Online Store Kit 3.0 - 'listing.php?id' SQL Injection
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorize
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'glossary.php' Arbitrary File Access
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.