Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
Debian 2.1 - apcd Symlink
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Virtual Machine 2000 - Series/3000 Series getSystemResource
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restric
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - Directory Traversal
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed H
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 3.4 / NetBSD 1.4.1 / OpenBSD 2.6 - '/proc' FileSystem
procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Inter7 vpopmail (vchkpw) 3.4.11 - Local Buffer Overflow
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Services 4.0/4.1 - Handshake Sequence Denial of Service
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets t
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
A-V Tronics InetServ 3.0 - WebMail GET
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Nosque Workshop MsgCore 1.9 - Denial of Service
Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a den
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Corel Linux OS 1.0 - get_it PATH
get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp p
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mirabilis ICQ 0.99b 1.1.1.1/3.19 - Remote Buffer Overflow
Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (1)
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RedHat 6.1 / IRIX 6.5.18 - 'lpd' Command Execution
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reve
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NullSoft Winamp 2.10 - Playlist
Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm qpopper 3.0 - 'LIST' Remote Buffer Overflow
Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1/5.5 - preview Security Zone Settings Lag
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security d
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1/5.5 - preview Security Zone Settings Lag
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 3.0.7 - 'auth.php3' Backdoor Access
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 3.0.7 - 'admin.php3' Unverified Administrative Password Change
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail 5.0.8/6.0/6.1 - IMonitor 'status.cgi' Denial of Service
IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 3.0.13 - 'Safe_mode' Failure
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, whic
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mandrake 6.x / RedHat 6.x / Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM - Path (1)
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) att
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Allaire ColdFusion Server 4.0/4.0.1 - 'CFCACHE' Information Disclosure
Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain s
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solution Scripts Home Free 1.0 - 'search.cgi' Directory Traversal
search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attac
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell Redirection Race Condition
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on th
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 3.0.7 - 'violation.php3' Arbitrary Email Relay
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ascend CascadeView/UX 1.0 tftpd - Symbolic Link
CascadeView TFTP server allows local users to gain privileges via a symlink attack.
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.