Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.836exploits catalogados

32.133CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8156Nuclei 4201Metasploit 3462✓ solo verificadosrecientes populares riesgo

19.967 exploits

Referência

CVE-2016-4226

CVE-2016-4226—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RIESGO

Referência

CVE-2016-6255

CVE-2016-6255—

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a P

28RIESGO

Referência

CVE-2020-3161

CVE-2020-3161CRITICALbajo ataque

Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

100RIESGO

Referência

CVE-2015-3337

CVE-2015-3337—

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a

50RIESGO

Referência

CVE-2015-3337

CVE-2015-3337—

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a

50RIESGO

Referência

CVE-2017-6187

CVE-2017-6187—

Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary c

50RIESGO

Referência

CVE-2018-14716

CVE-2018-14716—

A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because reques

35RIESGO

Referência

eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)

CVE-2009-1028—

Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z

50RIESGO

Referência

CVE-2015-8411

CVE-2015-8411—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RIESGO

Referência

CVE-2015-8413

CVE-2015-8413—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RIESGO

Referência

CVE-2015-8410

CVE-2015-8410—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RIESGO

Referência

CVE-2015-8412

CVE-2015-8412—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RIESGO

Referência

CVE-2015-8048

CVE-2015-8048—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RIESGO

Referência

CVE-2010-4321

CVE-2010-4321—

Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to

50RIESGO

Referência

DVD X Player 4.1 Professional - '.PLF' File Buffer Overflow

CVE-2007-3068—

Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF

50RIESGO

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RIESGO

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RIESGO

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RIESGO

Referência

CVE-2009-5109

CVE-2009-5109—

Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e

50RIESGO

Referência

CVE-2016-4231

CVE-2016-4231—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RIESGO

Referência

CVE-2016-4227

CVE-2016-4227—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows

35RIESGO

Referência

CVE-2018-19458

CVE-2018-19458—

In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI UR

50RIESGO

Referência

CVE-2017-3241

CVE-2017-3241—

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versi

35RIESGO

Referência

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

CVE-2008-3364—

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeS

35RIESGO

Referência

Now SMS/Mms Gateway 5.5 - Remote Buffer Overflow

CVE-2008-0871—

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar

50RIESGO

Referência

CVE-2017-2992

CVE-2017-2992—

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 h

35RIESGO

Referência

CVE-2013-3143

CVE-2013-3143—

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem

35RIESGO

Referência

Tatsu 3.3.11 - Unauthenticated RCE

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RIESGO

Referência

CVE-2013-3143

CVE-2013-3143—

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (mem

35RIESGO

Referência

CVE-2019-0235

CVE-2019-0235—

Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.

35RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.