Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
83.780exploits catalogados
39.319CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
EMC AlphaStor Device Manager Opcode 0x75 - Command Injection (Metasploit)
The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Advantech Webaccess - dvs.ocx GetColor Buffer Overflow (Metasploit)
Advantech WebAccess Stack-Based Buffer Overflow
68RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
LittleSite 0.1 - 'index.php' Local File Inclusion
Directory traversal vulnerability in ls.php in LittleSite (aka LS or LittleSite.php) 0.1 allows remote attackers to incl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aztech Modem Routers - Session Hijacking
Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (1)
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ManageEngine Eventlog Analyzer - Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aztech Modem Routers - Information Disclosure
Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configurat
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Railo 4.2.1 - Remote File Inclusion (Metasploit)
A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cf
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Aztech Routers - '/cgi-bin/AZ_Retrain.cgi' Denial of Service
cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication,
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ManageEngine Desktop Central StatusUpdate - Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ManageEngine Desktop Central StatusUpdate - Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 9.0.1 / Thunderbird 3.1.20 - Information Disclosure
Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1 do not properly initialize m
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download
Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote att
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Wing FTP Server - (Authenticated) Command Execution (Metasploit)
20RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox - WebIDL Privileged JavaScript Injection (Metasploit)
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and Se
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin ShortCode 0.2.3 - Local File Inclusion
Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox - WebIDL Privileged JavaScript Injection (Metasploit)
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remo
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
glibc - NUL Byte gconv_translit_find Off-by-One
Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-depe
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Granding MA300 - Traffic Sniffing Man In The Middle Fingerprint PIN Disclosure
Grand MA 300 allows retrieval of the access PIN from sniffed data.
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.