Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
88.056exploits catalogados
40.804CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4578Metasploit 3539✓ solo verificadosrecientespopularesriesgo
24.489 exploits
Exploit-DB✓ VexDay Proof
ISC BIND (Linux/BSD) - Remote Buffer Overflow (1)
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ISC BIND (Multiple OSes) - Remote Buffer Overflow (2)
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Slackware Linux 3.4 - 'pkgtool' Temporary File
Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris x86 2.4/2.5 - nlps_server Buffer Overflow
Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code
53RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4/4.0 SP5 - RAS Dial-up Networking Save Password
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ascend R 4.5 Ci12 - Denial of Service
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lucent Ascend MAX 5.0/Pipeline 6.0/TNT 1.0/2.0 Router - MAX UDP Port 9 (2)
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ascend R 4.5 Ci12 - Denial of Service
Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Lucent Ascend MAX 5.0/Pipeline 6.0/TNT 1.0/2.0 Router - MAX UDP Port 9 (1)
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port,
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HEL
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Exchange Server 4.0/5.0 - SMTP HELO Argument Buffer Overflow
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HEL
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Info2www 1.0/1.1 - CGI Input Handling
The info2www CGI script allows remote file access or remote command execution.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Miva htmlscript 2.x - Directory Traversal
htmlscript CGI program allows remote read access to files.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.0/2.1 (Digital UNIX 4.0 D / FreeBSD 2.2.4 / HP HP-UX 10.20/11.0 / IBM AIX 3.2.5 / NetBSD 1.2 / Solaris 2.5.1) - Smurf Denial of Service
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 3.0/4.0 / Microsoft Personal Web Server 2.0/3.0/4.0 - ASP Alternate Data Streams
In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache 1.2 - Denial of Service
Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.1.89/2.2.x - Zero-Length Fragment
Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.5.1 - 'automount' Local Privilege Escalation
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 3.2/4.1 / SCO Unixware 7.1.1 / SGI IRIX 5.3 / Sun Solaris 2.5.1 - Privilege Escalation
Buffer overflow in statd allows root privileges.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 2.x / HP-UX 9/10/11 / Kernel 2.0.3 / Windows NT 4.0/Server 2003 / NetBSD 1 - 'land.c' loopback Denial of Service (2)
Land IP denial of service.
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 2.x / HP-UX 9/10/11 / Kernel 2.0.3 / Windows NT 4.0/Server 2003 / NetBSD 1 - 'land.c' loopback Denial of Service (4)
Land IP denial of service.
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 2.x / HP-UX 9/10/11 / Kernel 2.0.3 / Windows NT 4.0/Server 2003 / NetBSD 1 - 'land.c' loopback Denial of Service (1)
Land IP denial of service.
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 2.x / HP-UX 9/10/11 / Kernel 2.0.3 / Windows NT 4.0/Server 2003 / NetBSD 1 - 'land.c' loopback Denial of Service (5)
Land IP denial of service.
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 2.x / HP-UX 9/10/11 / Kernel 2.0.3 / Windows NT 4.0/Server 2003 / NetBSD 1 - 'land.c' loopback Denial of Service (3)
Land IP denial of service.
45RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP HP-UX 10.34 / Microsoft Windows 95/NT 3.5.1 SP1/NT 3.5.1 SP2/NT 3.5.1 SP3/NT 3.5.1 SP4/NT 4.0/NT 4.0 SP1/NT 4.0 SP2/NT 4.0 SP3 - Denial of Service
Teardrop IP denial of service.
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
iCat Electronic Commerce Suite 3.0 - File Disclosure
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary file
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 4.2.1 - '/usr/bin/portmir' Local Buffer Overflow / Insecure Temporary File Creation
Various vulnerabilities in the AIX portmir command allows local users to obtain root access.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP/FI 1.0/FI 2.0/FI 2.0 b10 - mylog/mlog
CGI PHP mylog script allows an attacker to read any file on the target server.
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Muhammad A. Muquit wwwcount 2.3 - 'Count.cgi' Remote Buffer Overflow
Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0 - SNMP-WINS Denial of Service
All records in a WINS database can be deleted through SNMP for a denial of service.
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.