Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados
39.319CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
3523 exploits
Metasploit300
SCADA 3S CoDeSys CmpWebServer Stack Buffer Overflow
CVE-2011-5007—02 dic 2011
Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB
60RIESGO
abrir ↗
Metasploit400
CCMPlayer 1.5 m3u Playlist Stack Based Buffer Overflow
CVE-2011-5170—30 nov 2011
Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code vi
50RIESGO
abrir ↗
Metasploit200
MS11-080 AfdJoinLeaf Privilege Escalation
CVE-2011-2005HIGHbajo ataque30 nov 2011
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly valid
98RIESGO
abrir ↗
Metasploit600
WikkaWiki 1.3.2 Spam Logging PHP Injection
CVE-2011-4451—30 nov 2011
libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to w
43RIESGO
abrir ↗
Metasploit300
Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow
CVE-2011-5003—29 nov 2011
Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier a
50RIESGO
abrir ↗
Metasploit600
Family Connections less.php Remote Command Execution
CVE-2011-5130—29 nov 2011
dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers t
50RIESGO
abrir ↗
Metasploit600
V-CMS PHP File Upload and Execute
CVE-2011-4828—27 nov 2011
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RIESGO
abrir ↗
Metasploit300
Yaws Web Server Directory Traversal
CVE-2011-4350—25 nov 2011
Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user cou
23RIESGO
abrir ↗
Metasploit600
Hastymail 2.1.1 RC1 Command Injection
CVE-2011-4542—22 nov 2011
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] paramet
43RIESGO
abrir ↗
Metasploit300
VMware Update Manager 4 Directory Traversal
CVE-2011-4404—21 nov 2011
The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 bef
50RIESGO
abrir ↗
Metasploit600
HP StorageWorks P4000 Virtual SAN Appliance Command Execution
CVE-2012-4361—11 nov 2011
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to exe
50RIESGO
abrir ↗
Metasploit600
Support Incident Tracker Remote Command Execution
CVE-2011-3829—10 nov 2011
ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive in
43RIESGO
abrir ↗
Metasploit600
Support Incident Tracker Remote Command Execution
CVE-2011-3833—10 nov 2011
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote
43RIESGO
abrir ↗
Metasploit400
Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow
CVE-2011-4496—09 nov 2011
Buffer overflow in Aviosoft DTV Player 1.0.1.2 allows remote attackers to execute arbitrary code via a crafted .plf (aka
23RIESGO
abrir ↗
Metasploit600
PmWiki pagelist.php Remote PHP Code Injection Exploit
CVE-2011-4453—09 nov 2011
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RIESGO
abrir ↗
Metasploit300
AbsoluteFTP 1.9.6 - 2.2.10 LIST Command Remote Buffer Overflow
CVE-2011-5164—09 nov 2011
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute ar
43RIESGO
abrir ↗
Metasploit600
InduSoft Web Studio Arbitrary Upload Remote Code Execution
CVE-2011-4051—04 nov 2011
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require au
50RIESGO
abrir ↗
Metasploit600
HP Data Protector 6.10/6.11/6.20 Install Service
CVE-2011-0922—02 nov 2011
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that ref
50RIESGO
abrir ↗
Metasploit600
Novell ZENworks Asset Management Remote Execution
CVE-2011-2653—02 nov 2011
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote at
60RIESGO
abrir ↗
Metasploit300
HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflow
CVE-2011-3167—01 nov 2011
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute
50RIESGO
abrir ↗
Metasploit300
NJStar Communicator 3.00 MiniSMTP Buffer Overflow
CVE-2011-4040—31 oct 2011
Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a cra
50RIESGO
abrir ↗
Metasploit600
phpLDAPadmin query_engine Remote PHP Code Injection
CVE-2011-4075—24 oct 2011
The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary
50RIESGO
abrir ↗
Metasploit300
HP Power Manager 'formExportDataLogs' Buffer Overflow
CVE-2009-3999—19 oct 2011
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to ex
60RIESGO
abrir ↗
Metasploit300
AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution
CVE-2011-2657—19 oct 2011
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Laun
50RIESGO
abrir ↗
Metasploit600
Java Applet Rhino Script Engine Remote Code Execution
CVE-2011-3544CRITICALbajo ataque18 oct 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and
100RIESGO
abrir ↗
Metasploit600
Java RMI Server Insecure Default Configuration Java Code Execution
CVE-2011-3556—15 oct 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ear
60RIESGO
abrir ↗
Metasploit300
Java RMI Server Insecure Endpoint Code Execution Scanner
CVE-2011-3556—15 oct 2011
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and ear
60RIESGO
abrir ↗
Metasploit300
Apple Safari file:// Arbitrary Code Execution
CVE-2011-3230—12 oct 2011
Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers
50RIESGO
abrir ↗
Metasploit400
ScriptFTP LIST Remote Buffer Overflow
CVE-2011-3976—12 oct 2011
Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long file
50RIESGO
abrir ↗
Metasploit600
myBB 1.6.4 Backdoor Arbitrary Command Execution
CVE-2011-10018CRITICAL06 oct 2011
myBB 1.6.4 Backdoor Arbitrary Command Execution
63RIESGO
abrir ↗
← anteriorpágina 77 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.