Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.899exploits catalogados
40.763CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4577Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
Debian 2.2 - splitvt Format String
Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Seyon 2.1 rev. 4b i586-Linux (RedHat 4.0/5.1) - Local Overflow
FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 7.0 - '.wmz' Arbitrary Java Applet
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosi
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 4 / Outlook 2000/5.5 - 'MSHTML.dll' Crash
MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of servic
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lotus Domino Server 5.0.x - Directory Traversal (1)
Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7/8-beta - ARP Local Overflow
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f p
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
APC UPS 3.7.2 - 'apcupsd' Local Denial of Service
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary pr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP-UX 11.0 - '/bin/cu' Local Privilege Escalation
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (2)
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (1)
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctm
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
BSD chpass - 'pw_error(3)' Local Privilege Escalation
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.2.0 pre10 - Remote Denial of Service
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Basilix Webmail 0.9.7 - Incorrect File Permissions
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Borland/Inprise Interbase 4.0/5.0/6.0 - Backdoor Password
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedur
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebMaster ConferenceRoom 1.8 Developer Edition - Denial of Service
WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ReiserFS 3.5.28 (Linux Kernel) - Code Execution / Denial of Service
Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute ar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ScreenOS 1.73/2.x - Firewall Denial of Service
Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM HTTP Server 1.3 - AfpaCache/WebSphereNet.Data Denial of Service
Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Web
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
eXtropia bbs_forum.cgi 1.0 - Arbitrary Command Execution
Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lotus Domino Server 5.0.x - Directory Traversal (2)
Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.2.0 rc2 - Memory Leakage
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WU-FTPD 2.6.0 - Remote Format Strings
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remo
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
tcpdump 3.4/3.5 - AFS ACL Packet Buffer Overflow
Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GTK+ 1.2.8 - Arbitrary Loadable Module Execution
GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could all
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 7.0 - JavaScript URL
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via j
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.11.x (Linux/i386) - Local Privilege Escalation
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted addre
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Technote 2000/2001 - 'Filename' Command Execution / File Disclosure
Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LICQ 0.85/1.0.1/1.0.2 - Remote Buffer Overflow
Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and poss
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Technote 2000/2001 - 'board' File Disclosure
Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Infinite Interchange 3.61 - Denial of Service
The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.