Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.836exploits catalogados

32.133CVEs con explotación pública

1932probados en laboratorio

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8156Nuclei 4201Metasploit 3462✓ solo verificadosrecientes populares riesgo

3462 exploits

Metasploit500

HTTPDX tolog() Function Format String Vulnerability

CVE-2009-4769—17 nov 2009

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remo

50RIESGO

Metasploit600

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

CVE-2009-4850—14 nov 2009

The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneU

43RIESGO

Metasploit400

MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability

CVE-2009-3129HIGHbajo ataque10 nov 2009

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Conv

100RIESGO

Metasploit300

Microsoft Windows EOT Font Table Directory Integer Overflow

CVE-2009-2514—10 nov 2009

win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse fon

50RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2010-4094—09 nov 2009

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc

50RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-4189—09 nov 2009

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

60RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2010-0557—09 nov 2009

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial

50RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-4188—09 nov 2009

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

50RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-3548—09 nov 2009

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

60RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-3843—09 nov 2009

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all

60RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-4189—09 nov 2009

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

60RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2010-0557—09 nov 2009

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial

50RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2010-4094—09 nov 2009

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc

50RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-4188—09 nov 2009

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

50RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-3548—09 nov 2009

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

60RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-3843—09 nov 2009

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all

60RIESGO

Metasploit500

Sun Java JRE AWT setDiffICM Buffer Overflow

CVE-2009-3869—04 nov 2009

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment

50RIESGO

Metasploit500

Sun Java JRE getSoundbank file:// URI Buffer Overflow

CVE-2009-3867—04 nov 2009

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, J

60RIESGO

Metasploit300

Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow

CVE-2009-3033—04 nov 2009

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilitie

50RIESGO

Metasploit400

IBM Tivoli Storage Manager Express CAD Service Buffer Overflow

CVE-2009-3853—04 nov 2009

Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (T

50RIESGO

Metasploit500

IBM Tivoli Storage Manager Express RCA Service Buffer Overflow

CVE-2008-4828—04 nov 2009

Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM

60RIESGO

Metasploit200

Hewlett-Packard Power Manager Administration Buffer Overflow

CVE-2009-2685—04 nov 2009

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers t

60RIESGO

Metasploit300

Symantec ConsoleUtilities ActiveX Control Buffer Overflow

CVE-2009-3031—02 nov 2009

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6

50RIESGO

Metasploit200

CA eTrust PestPatrol ActiveX Control Buffer Overflow

CVE-2009-4225—02 nov 2009

Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote

50RIESGO

Metasploit400

Rhinosoft Serv-U Session Cookie Buffer Overflow

CVE-2009-4006—01 nov 2009

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other ver

60RIESGO

Metasploit400

SafeNet SoftRemote GROUPNAME Buffer Overflow

CVE-2009-3861—30 oct 2009

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions bef

38RIESGO

Metasploit200

UFO: Alien Invasion IRC Client Buffer Overflow

CVE-2009-10006CRITICAL28 oct 2009

UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow

43RIESGO

Metasploit200

UFO: Alien Invasion IRC Client Buffer Overflow

CVE-2009-10006CRITICAL28 oct 2009

UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow

43RIESGO

Metasploit300

Eureka Email 2.2q ERR Remote Buffer Overflow

CVE-2009-3837—22 oct 2009

Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error m

50RIESGO

Metasploit500

Oracle 10gR2 TNS Listener AUTH_SESSKEY Buffer Overflow

CVE-2009-1979—20 oct 2009

Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote

60RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.