Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
71.760exploits catalogados
32.083CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 19.934GitHub PoC 13.235VulnCheck XDB 8150Nuclei 4193Metasploit 3462✓ solo verificadosrecientespopularesriesgo
22.786 exploits
Exploit-DB
D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves b
35RIESGO
abrir ↗Exploit-DB
Git Submodule - Arbitrary Code Execution (PoC)
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x be
60RIESGO
abrir ↗Exploit-DB
D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser
23RIESGO
abrir ↗Exploit-DB
D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateS
23RIESGO
abrir ↗Exploit-DB
Cisco Prime Infrastructure - (Unauthenticated) Remote Code Execution
Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability
60RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
RICOH MP C1803 JPN Printer - Cross-Site Scripting
On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of add
23RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
Airties AIR5342 1.0.0.18 - Cross-Site Scripting
AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
23RIESGO
abrir ↗Exploit-DB
RICOH MP C1803 JPN Printer - Cross-Site Scripting
On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding a
23RIESGO
abrir ↗Exploit-DB
OPAC EasyWeb Five 5.7 - 'biblio' SQL Injection
An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio par
23RIESGO
abrir ↗Exploit-DB
Linux Kernel < 4.11.8 - 'mq_notify: double sock_put()' Local Privilege Escalation
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr
23RIESGO
abrir ↗Exploit-DB
WUZHICMS 2.0 - Cross-Site Scripting
XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter.
23RIESGO
abrir ↗Exploit-DB
Zahir Enterprise Plus 6 build 10b - Buffer Overflow (SEH)
Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute a
43RIESGO
abrir ↗Exploit-DB
PCProtect 4.8.35 - Privilege Escalation
PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users
23RIESGO
abrir ↗Exploit-DB
Microsoft Edge - Sandbox Escape
An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privil
28RIESGO
abrir ↗Exploit-DB
Microsoft Edge - Sandbox Escape
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCont
28RIESGO
abrir ↗Exploit-DB
Microsoft Edge - Sandbox Escape
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCont
28RIESGO
abrir ↗Exploit-DB
EE 4GEE Mini EE40_00_02.00_44 - Privilege Escalation
The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before
23RIESGO
abrir ↗Exploit-DB
Rausoft ID.prove 2.95 - 'Username' SQL injection
An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked q
23RIESGO
abrir ↗Exploit-DB
Linux Kernel 2.6.x / 3.10.x / 4.14.x (RedHat / Debian / CentOS) (x64) - 'Mutagen Astronomy' Local Privilege Escalation
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with a
76RIESGO
abrir ↗Exploit-DB
Linux Kernel - VMA Use-After-Free via Buggy vmacache_flush_all() Fastpath Local Privilege Escalation
An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles
23RIESGO
abrir ↗Exploit-DB
WebKit - 'WebCore::RenderLayer::updateDescendantDependentFlags' Use-After-Free
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS
23RIESGO
abrir ↗Exploit-DB
Joomla! Component AlphaIndex Dictionaries 1.0 - SQL Injection
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.
23RIESGO
abrir ↗Exploit-DB
Solaris - 'EXTREMEPARR' dtappgather Privilege Escalation (Metasploit)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (C
38RIESGO
abrir ↗Exploit-DB
WebKit - 'WebCore::SVGAnimateElementBase::resetAnimatedType' Use-After-Free
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS
28RIESGO
abrir ↗Exploit-DB
Joomla! Component Social Factory 3.8.3 - SQL Injection
SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radiu
23RIESGO
abrir ↗Exploit-DB
Joomla! Component Timetable Schedule 3.6.8 - SQL Injection
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.