Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Rob Malda ASCDC 0.3 - Local Buffer Overflow (1)
Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d op
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - WebDAV Denial of Service
IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 11.x/12.x - HTTP Configuration Arbitrary Administrative Access (3)
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when lo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
jarle aase war ftpd 1.67 b04 - Directory Traversal
Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly rea
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
sendtemp.pl - Read Access to Files
Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WhitSoft SlimServe HTTPd 1.0/1.1 - Directory Traversal
Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (mod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GLIBC 2.1.3 - 'LD_PRELOAD' Local Privilege Escalation
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 3.5.1/4.2 - Ports Package 'elvrec' Local Privilege Escalation
Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 3.5.1/4.2 - Ports Package 'xklock' Local Privilege Escalation
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IMAP4rev1 12.261/12.264/2000.284 - 'lsub' Remote Overflow
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Tru64 UNIX 4.0g - '/usr/bin/at' Local Privilege Escalation
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (4)
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SunFTP 1.0 Build 9 - Unauthorized File Access
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) cha
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netwin SurgeFTP 1.0b - Denial of Service
NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (1)
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (3)
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (2)
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView OmniBack II A.03.50 - Command Execution (Metasploit)
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack c
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WhitSoft SlimServe ftpd 1.0/2.0 - Directory Traversal
Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (mod
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
datawizards ftpxq 2.0.93 - Directory Traversal
Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Joe Text Editor 2.8 - '.joerc' Arbitrary Command Execution
Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow lo
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WhitSoft SlimServe HTTPd 1.1 - 'GET' Denial of Service
Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitr
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sapio WebReflex 1.55 - GET Denial of Service
Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbit
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 11.x/12.0 - ILMI SNMP Community String
Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Loca
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Robin Twombly A1 HTTP Server 1.0 - Directory Traversal
Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot d
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Orange Software Orange Web Server 2.1 - Denial of Service
Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
APC WEB/SNMP Management Card (9606) Firmware 3.0 - Telnet Administration Denial of Service
APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Atrium Software Mercur Mail Server 3.3 - EXPN Buffer Overflow
Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sudo 1.5/1.6 - Heap Corruption
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Working Resources BadBlue 1.2.7 - Denial of Service
Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.