Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados
39.319CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
3523 exploits
Metasploit300
Easy CD-DA Recorder PLS Buffer Overflow
CVE-2010-2343—07 jun 2010
Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi
50RIESGO
abrir ↗
Metasploit300
Adobe Flash Player "newfunction" Invalid Pointer Use
CVE-2010-1297HIGHbajo ataque04 jun 2010
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrob
100RIESGO
abrir ↗
Metasploit300
Adobe Flash Player "newfunction" Invalid Pointer Use
CVE-2010-1297HIGHbajo ataque04 jun 2010
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrob
100RIESGO
abrir ↗
Metasploit200
MacOS X EvoCam HTTP GET Buffer Overflow
CVE-2010-2309—01 jun 2010
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RIESGO
abrir ↗
Metasploit600
Outlook ATTACH_BY_REF_ONLY File Execution
CVE-2010-0266—01 jun 2010
Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_
50RIESGO
abrir ↗
Metasploit600
Outlook ATTACH_BY_REF_RESOLVE File Execution
CVE-2010-0266—01 jun 2010
Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_
50RIESGO
abrir ↗
Metasploit300
SolarWinds TFTP Server 10.4.0.10 Denial of Service
CVE-2010-2115—21 may 2010
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted
50RIESGO
abrir ↗
Metasploit500
CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow
CVE-2010-20119HIGH19 may 2010
CommuniCrypt Mail <= 1.16 ANSMTP/AOSMTP ActiveX Control Buffer Overflow
36RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager getnnmdata.exe (MaxAge) CGI Buffer Overflow
CVE-2010-1553—11 may 2010
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
60RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager getnnmdata.exe (Hostname) CGI Buffer Overflow
CVE-2010-1555—11 may 2010
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
50RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager getnnmdata.exe (ICount) CGI Buffer Overflow
CVE-2010-1554—11 may 2010
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
50RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager snmpviewer.exe Buffer Overflow
CVE-2010-1552—11 may 2010
Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01,
50RIESGO
abrir ↗
Metasploit600
HP Mercury LoadRunner Agent magentproc.exe Remote Command Execution
CVE-2010-1549—06 may 2010
Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote
60RIESGO
abrir ↗
Metasploit400
Microsoft Office Visio VISIODWG.DLL DXF File Handling Vulnerability
CVE-2010-1681—04 may 2010
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to ex
50RIESGO
abrir ↗
Metasploit600
JBoss Java Class DeploymentFileRepository WAR Deployment
CVE-2010-0738LOWbajo ataqueransomware26 abr 2010
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RIESGO
abrir ↗
Metasploit600
JBoss JMX Console Beanshell Deployer WAR Upload and Deployment
CVE-2010-0738LOWbajo ataqueransomware26 abr 2010
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RIESGO
abrir ↗
Metasploit600
Maple Maplet File Creation and Command Execution
CVE-2010-20120HIGH26 abr 2010
Maple <= v13 Maplet File Creation and Command Execution
36RIESGO
abrir ↗
Metasploit300
Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.DROP_CHANGE_SOURCE
CVE-2010-0870—26 abr 2010
Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote au
23RIESGO
abrir ↗
Metasploit300
Xftp FTP Client 3.0 PWD Remote Buffer Overflow
CVE-2010-20122CRITICAL22 abr 2010
Xftp FTP Client <= 3.0 PWD Response Buffer Overflow
43RIESGO
abrir ↗
Metasploit400
AgentX++ Master AgentX::receive_agentx Stack Buffer Overflow
CVE-2010-1318—16 abr 2010
Stack-based buffer overflow in the AgentX::receive_agentx function in AgentX++ 1.4.16, as used in RealNetworks Helix Ser
50RIESGO
abrir ↗
Metasploit300
MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow
CVE-2010-0480—13 abr 2010
Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Se
50RIESGO
abrir ↗
Metasploit500
Windows Media Services ConnectFunnel Stack Buffer Overflow
CVE-2010-0478—13 abr 2010
Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 200
50RIESGO
abrir ↗
Metasploit300
Trellian FTP Client 3.01 PASV Remote Buffer Overflow
CVE-2010-1465—11 abr 2010
Stack-based buffer overflow in Trellian FTP client 3.01, including 3.1.3.1789, allows remote attackers to execute arbitr
50RIESGO
abrir ↗
Metasploit600
Sun Java Web Start Plugin Command Line Argument Injection
CVE-2010-0886—09 abr 2010
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6
50RIESGO
abrir ↗
Metasploit600
Sun Java Web Start Plugin Command Line Argument Injection
CVE-2010-1423—09 abr 2010
Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 U
50RIESGO
abrir ↗
Metasploit600
AjaXplorer checkInstall.php Remote Command Execution
CVE-2010-10013CRITICAL04 abr 2010
AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE
63RIESGO
abrir ↗
Metasploit500
EasyFTP Server MKD Command Stack Buffer Overflow
CVE-2011-10005MEDIUM04 abr 2010
EasyFTP MKD Command buffer overflow
28RIESGO
abrir ↗
Metasploit600
Java Statement.invoke() Trusted Method Chain Privilege Escalation
CVE-2010-0840CRITICALbajo ataque31 mar 2010
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18,
100RIESGO
abrir ↗
Metasploit600
Java RMIConnectionImpl Deserialization Privilege Escalation
CVE-2010-0094—31 mar 2010
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18
60RIESGO
abrir ↗
Metasploit300
Novell ZENworks Configuration Management Preboot Service 0x21 Buffer Overflow
CVE-2012-2215—30 mar 2010
Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1
23RIESGO
abrir ↗
← anteriorpágina 85 / 118siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.