Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.279exploits catalogados
36.463CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.051GitHub PoC 15.049VulnCheck XDB 8860Nuclei 4361Metasploit 3493✓ solo verificadosrecientespopularesriesgo
24.459 exploits
Exploit-DB✓ VexDay Proof
George Burgyan CGI Counter 4.0.2/4.0.7 - Input Validation
The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - FTP Denial of Service (MS01-026)
The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of ser
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Active Movie Control 1.0 - Filetype
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
John Donoghue Knapster 0.9/1.3.8 - File Access
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - Malformed File Extension Denial of Service
IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a l
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Bugzilla 2.4/2.6/2.8/2.10 - Arbitrary Command Execution
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - Malformed Filename Request
ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large nu
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Matt Wright FormMail 1.6/1.7/1.8 - Environmental Variables Disclosure
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape Communicator 4.5/4.51/4.6/4.61/4.7/4.72/4.73 - '/tmp' Symlink
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Etype Eserv 2.9.2 - Logging Buffer Overflow
Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Intel Corporation NetStructure 7110 - Undocumented Password
NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable f
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FrontPage 2000 / IIS 4.0/5.0 - Server Extensions Full Path Disclosure
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the ph
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Gossamer Threads DBMan 2.0.4 - DBMan Information Leakage
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup informati
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UltraBoard 1.6 - Denial of Service
UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the S
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aladdin Knowledge Systems eToken 3.3.3 - eToken PIN Extraction
The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive info
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 3.4/4.0/5.0 / NetBSD 1.4 - Unaligned IP Option Denial of Service
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedHat Linux 6.0/6.1/6.2 - 'pam_console' Monitor Activity After Logout
The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file desc
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cart32 3.0 - 'expdate' Administrative Information Disclosure
Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ultrascripts ultraboard 1.6 - Directory Traversal
UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a path
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Brecht Claerhout Sniffit 0.3.6 HIP/0.3.7 Beta - Mail Logging Buffer Overflow (2)
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Brecht Claerhout Sniffit 0.3.6 HIP/0.3.7 Beta - Mail Logging Buffer Overflow (1)
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 95/98 - NetBIOS NULL Name
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
L-Soft Listserv 1.8 - Web Archives Buffer Overflow
Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary comman
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Atrium Software Cassandra NNTP Server 1.10 - Buffer Overflow
ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SuSE Linux 6.3/6.4 Gnomelib - Local Buffer Overflow
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environme
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention
Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) c
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
McMurtrey/Whitaker & Associates Cart32 2.6/3.0 - Remote Administration Password
A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 11.x/12.x - HTTP %%
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a deni
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec pcAnywhere 8.0.1/8.0.2/9.0/9.2 - Port Scan Denial of Service
pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.