Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
OpenBSD 2.x < 2.8 FTPd - 'glob()' Remote Buffer Overflow
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern strin
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft ISA Server 2000 Web Proxy - Denial of Service
Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of se
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (2)
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F'
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSlash 0.5.3 2/0.6.1 - URL Block Arbitrary File Disclosure
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Remote Buffer Overflow
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern strin
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Siemens Reliant UNIX 5.4 - ppd -T Race Condition
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - TCP Stack Denial of Service (1)
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of e
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape SmartDownload 1.3 - Remote Buffer Overflow
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - TCP Stack Denial of Service (2)
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of e
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere/Net.Commerce 3 - CGI-BIN Macro Denial of Service
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NCM Content Management System - content.pl Input Validation
content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content dat
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 a
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7.0/8 - IPCS Timezone Buffer Overflow
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environme
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Local Buffer Overflow
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cfingerd 1.4 - Format String (1)
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privilege
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Application Server 4.0.8.2 - ndwfn4.so Buffer Overflow
Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle app
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Strip Password Generator 0.3/0.4/0.5 - Limited Password-Space
Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.x/7.0/8 - Xsun HOME Buffer Overflow
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME enviro
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
nph-maillist 3.0/3.5 - Arbitrary Code Execution
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email addres
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (1)
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overf
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IPFilter 3.x - Fragment Rule Bypass
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PGP 5.x/6.x/7.0 - ASCII Armor Parser Arbitrary File Creation
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malfor
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (2)
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overf
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape Navigator 4.0.8 - 'about:' Domain Information Disclosure
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco PIX 4.x/5.x TACACS+ - Denial of Service
Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to c
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTPd 4.0.99j-k readvar - Remote Buffer Overflow (Metasploit)
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTPd - Remote Buffer Overflow
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gene6 BPFTP Server 2.0 - File Existence Disclosure
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting info
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Caucho Technology Resin 1.2/1.3 - JavaBean Disclosure
Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.