Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
78.794exploits catalogados
36.057CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8829Nuclei 4350Metasploit 3489✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Mephistoles HTTPd 0.6 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
2WIRE HomePortal Series - Directory Traversal
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other prod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the insta
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
anteco visual technologies ownserver 1.0 - Directory Traversal
Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to rea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Leif M. Wright Web Blog 1.1 - File Disclosure
Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.x - 'Descendancy.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
YABB SE 1.x - 'SSI.php' ID_MEMBER SQL Injection
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XtremeASP PhotoGallery 2.0 - 'Adminlogin.asp' SQL Injection
SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitra
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SuSE Linux 9.0 - YaST Configuration Skribt Overwrite Files
The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Privilege Escalation
The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
lftp 2.6.9 - Remote Stack Overflow
Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers t
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
KAME Racoon - 'Initial Contact' SA Deletion
KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'login.php?URL' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'Individual.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'Source.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'Timeline.php' SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'Relationship.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'login.php?Username' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'Imageview.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'Gedrecord.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'calendar.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'login.php' Newlanguage Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'Gdbi_interface.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HD Soft Windows FTP Server 1.5/1.6 - 'Username' Format String
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPGedView 2.5/2.6 - 'Placelist.php' SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
VisualShapers EZContents 1.4/2.0 - 'module.php' Remote Command Execution
PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Andy's PHP Projects Man Page Lookup Script - Information Disclosure
Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Accipiter DirectServer 6.0 - Remote File Disclosure
Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via enc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (2)
The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.