Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
87.933exploits catalogados
40.796CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.326VulnCheck XDB 10.507Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
ISC BIND 8.1 - Host Remote Buffer Overflow
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR qu
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Catalyst 3500 XL - Arbitrary Command Execution
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun HotJava Browser 3 - Arbitrary DOM Access
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named wind
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
iPlanet Certificate Management System 4.2 - Directory Traversal
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 12 - Software '?/' HTTP Request Denial of Service
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape Directory Server 4.12 - Directory Server Directory Traversal
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Avirt Mail 4.0/4.2 - 'Mail From:' / 'Rcpt to:' Denial of Service
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Allaire JRun 3 - Directory Disclosure
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Allaire JRun 2.3 - Arbitrary Code Execution
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scrip
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
David Bagley xlock 4.16 - User Supplied Format String (2)
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privile
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Intel InBusiness eMail Station 1.4.87 - Denial of Service
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of servi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP-UX 10.20/11.0 - crontab '/tmp' File
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target fil
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Hilgraeve HyperTerminal 6.0 - Telnet Buffer Overflow
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Internet Directory 2.0.6 - oidldap
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line param
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (5)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (4)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
anaconda Foundation 1.4 < 1.9 - Directory Traversal
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrar
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cURL 6.1 < 7.4 - Remote Buffer Overflow (1)
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utili
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
cURL 6.1 < 7.4 - Remote Buffer Overflow (2)
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 3.0/4.0 - Error Logging Format String
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary com
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
XFree86 3.3.5/3.3.6 - Xlib Display Buffer Overflow
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY envi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Oatmeal Studios Mail File 1.10 - Arbitrary File Disclosure
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nevis Systems All-Mail 1.1 - Remote Buffer Overflow
Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 9x/ME - Share Level Password Bypass (1)
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape iCal 2.1 Patch2 - iPlanet iCal 'csstart' Local Privilege Escalation
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could a
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.