Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.756exploits catalogados
39.319CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.394Exploit-DB 24.485GitHub PoC 16.225VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
3523 exploits
Metasploit600
Wordpress Front-end Editor File Upload
CVE-2012-10019CRITICAL04 jul 2012
Front-end Editor < 2.3 - Arbitrary File Upload
63RIESGO
abrir ↗
Metasploit600
SPIP connect Parameter PHP Injection
CVE-2013-4557—04 jul 2012
The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, all
23RIESGO
abrir ↗
Metasploit300
ALLMediaServer 0.8 Buffer Overflow
CVE-2017-17932—04 jul 2012
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow
50RIESGO
abrir ↗
Metasploit600
Tiki Wiki unserialize() PHP Code Execution
CVE-2012-0911—04 jul 2012
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RIESGO
abrir ↗
Metasploit600
Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Execution
CVE-2012-3811—28 jun 2012
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call
50RIESGO
abrir ↗
Metasploit600
Umbraco CMS Remote Command Execution
CVE-2012-10054CRITICAL28 jun 2012
Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
63RIESGO
abrir ↗
Metasploit600
Basilic 1.5.14 diff.php Arbitrary Command Execution
CVE-2012-3399—28 jun 2012
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the
50RIESGO
abrir ↗
Metasploit600
KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
CVE-2012-2516—26 jun 2012
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Pl
50RIESGO
abrir ↗
Metasploit600
SugarCRM unserialize() PHP Code Execution
CVE-2012-0694—23 jun 2012
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers
50RIESGO
abrir ↗
Metasploit500
Adobe Flash Player AVM Verification Logic Array Indexing Code Execution
CVE-2011-2110—21 jun 2012
Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android,
60RIESGO
abrir ↗
Metasploit600
EZHomeTech EzServer Stack Buffer Overflow Vulnerability
CVE-2024-23985HIGH18 jun 2012
EzServer 6.4.017 allows a denial of service (daemon crash) via a long string, such as one for the RNTO command.
36RIESGO
abrir ↗
Metasploit600
Open-FTPD 1.2 Arbitrary File Upload
CVE-2010-2620—18 jun 2012
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST
43RIESGO
abrir ↗
Metasploit600
IBM Lotus Notes Client URL Handler Command Injection
CVE-2012-2174—18 jun 2012
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted
50RIESGO
abrir ↗
Metasploit600
qdPM v7 Arbitrary PHP File Upload Vulnerability
CVE-2015-3884—14 jun 2012
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6)
23RIESGO
abrir ↗
Metasploit400
MS12-043 Microsoft XML Core Services MSXML Uninitialized Memory Corruption
CVE-2012-1889HIGHbajo ataque12 jun 2012
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacker
100RIESGO
abrir ↗
Metasploit300
MS12-037 Microsoft Internet Explorer Same ID Property Deleted Object Handling Memory Corruption
CVE-2012-1875—12 jun 2012
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit
50RIESGO
abrir ↗
Metasploit300
MS12-037 Microsoft Internet Explorer Fixed Table Col Span Heap Overflow
CVE-2012-1876—12 jun 2012
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo
50RIESGO
abrir ↗
Metasploit500
FreeBSD Intel SYSRET Privilege Escalation
CVE-2012-0217—12 jun 2012
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and
50RIESGO
abrir ↗
Metasploit300
Free Float FTP Server USER Command Buffer Overflow
CVE-2012-10023MEDIUM12 jun 2012
FreeFloat FTP Server USER Command Buffer Overflow
28RIESGO
abrir ↗
Metasploit600
F5 BIG-IP SSH Private Key Exposure
CVE-2012-1493—11 jun 2012
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RIESGO
abrir ↗
Metasploit300
MySQL Authentication Bypass Password Dump
CVE-2012-2122—09 jun 2012
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor
60RIESGO
abrir ↗
Metasploit400
ComSndFTP v1.3.7 Beta USER Format String (Write4) Vulnerability
CVE-2012-10055CRITICAL08 jun 2012
ComSndFTP v1.3.7 Beta USER Format String RCE
63RIESGO
abrir ↗
Metasploit600
Java Applet Field Bytecode Verifier Cache Remote Code Execution
CVE-2012-1723CRITICALbajo ataqueransomware06 jun 2012
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
100RIESGO
abrir ↗
Metasploit300
Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
CVE-2012-10051HIGH06 jun 2012
Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
36RIESGO
abrir ↗
Metasploit600
WordPress Plugin Foxypress uploadify.php Arbitrary Code Execution
CVE-2012-10020CRITICAL05 jun 2012
FoxyPress <= 0.4.2.1 - Arbitrary File Upload
63RIESGO
abrir ↗
Metasploit300
Sielco Sistemi Winlog Buffer Overflow 2.07.14 - 2.07.16
CVE-2012-3815—04 jun 2012
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 al
50RIESGO
abrir ↗
Metasploit300
IBM Lotus iNotes dwa85W ActiveX Buffer Overflow
CVE-2012-2175—01 jun 2012
Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x befo
43RIESGO
abrir ↗
Metasploit600
Active Collab "chat module" Remote PHP Code Injection Exploit
CVE-2012-6554—30 may 2012
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute
43RIESGO
abrir ↗
Metasploit600
PHP Volunteer Management System v1.0.2 Arbitrary File Upload Vulnerability
CVE-2012-10056HIGH28 may 2012
PHP Volunteer Management System 1.0.2 Arbitrary File Upload
36RIESGO
abrir ↗
Metasploit600
WordPress Asset-Manager PHP File Upload Vulnerability
CVE-2012-10026CRITICAL26 may 2012
WordPress Plugin Asset-Manager <= 2.0 PHP File Upload
63RIESGO
abrir ↗
← anteriorpágina 73 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.