Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados
39.319CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
3523 exploits
Metasploit400
Wireshark packet-dect.c Stack Buffer Overflow
CVE-2011-1591—18 abr 2011
Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allow
50RIESGO
abrir ↗
Metasploit600
CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection
CVE-2011-1653—13 abr 2011
Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before S
60RIESGO
abrir ↗
Metasploit300
Microsoft Windows DNSAPI.dll LLMNR Buffer Underrun DoS
CVE-2011-0657CRITICAL12 abr 2011
DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Wi
55RIESGO
abrir ↗
Metasploit600
Log1 CMS writeInfo() PHP Code Injection
CVE-2011-4825—11 abr 2011
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym
50RIESGO
abrir ↗
Metasploit400
VeryTools Video Spirit Pro
CVE-2011-0499—11 abr 2011
Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly othe
50RIESGO
abrir ↗
Metasploit300
Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability
CVE-2011-0611HIGHbajo ataque11 abr 2011
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; A
100RIESGO
abrir ↗
Metasploit400
VeryTools Video Spirit Pro
CVE-2011-0500—11 abr 2011
Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions;
50RIESGO
abrir ↗
Metasploit200
VideoLAN VLC ModPlug ReadS3M Stack Buffer Overflow
CVE-2011-1574—07 abr 2011
Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers t
50RIESGO
abrir ↗
Metasploit300
S40 0.4.2 CMS Directory Traversal Vulnerability
CVE-2011-10009HIGH07 abr 2011
S40 CMS 0.4.2 Path Traversal
36RIESGO
abrir ↗
Metasploit400
Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow
CVE-2011-5124—04 abr 2011
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 an
50RIESGO
abrir ↗
Metasploit300
Real Networks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution
CVE-2011-10028HIGH03 abr 2011
RealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution
36RIESGO
abrir ↗
Metasploit500
Linux PolicyKit Race Condition Privilege Escalation
CVE-2011-1485—01 abr 2011
Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privil
38RIESGO
abrir ↗
Metasploit400
7-Technologies IGSS IGSSdataServer.exe Stack Buffer Overflow
CVE-2011-1567—24 mar 2011
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Grap
50RIESGO
abrir ↗
Metasploit300
7-Technologies IGSS 9 IGSSdataServer .RMS Rename Buffer Overflow
CVE-2011-1567—24 mar 2011
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Grap
50RIESGO
abrir ↗
Metasploit600
7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities
CVE-2011-1565—24 mar 2011
Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphica
50RIESGO
abrir ↗
Metasploit600
7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities
CVE-2011-1566—24 mar 2011
Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA Syst
50RIESGO
abrir ↗
Metasploit400
VLC AMV Dangling Pointer Vulnerability
CVE-2010-3275—23 mar 2011
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a
60RIESGO
abrir ↗
Metasploit500
DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflow
CVE-2011-1563—21 mar 2011
Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier
60RIESGO
abrir ↗
Metasploit500
RealWin SCADA Server DATAC Login Buffer Overflow
CVE-2011-1563—21 mar 2011
Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier
60RIESGO
abrir ↗
Metasploit600
Interactive Graphical SCADA System Remote Command Injection
CVE-2011-1566—21 mar 2011
Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA Syst
50RIESGO
abrir ↗
Metasploit200
MPlayer Lite M3U Buffer Overflow
CVE-2011-10008HIGH19 mar 2011
MPlayer Lite r33064 M3U Stack-Based Buffer Overflow
36RIESGO
abrir ↗
Metasploit400
Adobe Flash Player AVM Bytecode Verification Vulnerability
CVE-2011-0609HIGHbajo ataque15 mar 2011
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.1
98RIESGO
abrir ↗
Metasploit300
Majordomo2 _list_file_get() Directory Traversal
CVE-2011-0049—08 mar 2011
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allo
60RIESGO
abrir ↗
Metasploit300
Majordomo2 _list_file_get() Directory Traversal
CVE-2011-0063—08 mar 2011
The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct d
60RIESGO
abrir ↗
Metasploit300
Foxit PDF Reader 4.2 Javascript File Write
CVE-2011-10030HIGH05 mar 2011
Foxit PDF Reader < 4.3.1.0218 JavaScript File Write
36RIESGO
abrir ↗
Metasploit600
LotusCMS 3.0 eval() Remote Command Execution
CVE-2011-0518—03 mar 2011
Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allo
43RIESGO
abrir ↗
Metasploit300
Wireshark CLDAP Dissector DOS
CVE-2011-1140—01 mar 2011
Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in W
23RIESGO
abrir ↗
Metasploit300
Solar FTP Server Malformed USER Denial of Service
CVE-2011-10029HIGH22 feb 2011
Solar FTP Server <= 2.1.1 Malformed USER Denial of Service
36RIESGO
abrir ↗
Metasploit600
Sun Java Applet2ClassLoader Remote Code Execution
CVE-2010-4452—15 feb 2011
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for B
60RIESGO
abrir ↗
Metasploit300
xRadio 0.95b Buffer Overflow
CVE-2008-2789—08 feb 2011
SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands vi
43RIESGO
abrir ↗
← anteriorpágina 80 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.