Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados
39.319CVEs con explotación pública
24.695probados en laboratorio
3523 exploits
Metasploit300
Viscom Software Movie Player Pro SDK ActiveX 6.8
CVE-2010-0356—12 ene 2010
Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom So
50RIESGO
abrir ↗
Metasploit400
Audiotran 1.4.1 (PLS File) Stack Buffer Overflow
CVE-2009-0476—09 ene 2010
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RIESGO
abrir ↗
Metasploit300
BS.Player 2.57 Buffer Overflow (Unicode SEH)
CVE-2010-10016CRITICAL07 ene 2010
BS.Player 2.57 Buffer Overflow via M3U Playlist Import
43RIESGO
abrir ↗
Metasploit300
NetTransport Download Manager 2.90.510 Buffer Overflow
CVE-2017-17968—02 ene 2010
A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remot
50RIESGO
abrir ↗
Metasploit300
DJ Studio Pro 5.1 .pls Stack Buffer Overflow
CVE-2009-4656—30 dic 2009
Stack-based buffer overflow in E-Soft DJ Studio Pro 4.2 including 4.2.2.7.5, and 5.x including 5.1.4.3.1, allows user-as
50RIESGO
abrir ↗
Metasploit500
BigAnt Server 2.52 USV Buffer Overflow
CVE-2009-4660—29 dic 2009
Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to
50RIESGO
abrir ↗
Metasploit300
Mini-Stream 3.0.1.1 Buffer Overflow
CVE-2009-5109—25 dic 2009
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e
50RIESGO
abrir ↗
Metasploit500
HP OmniInet.exe MSG_PROTOCOL Buffer Overflow
CVE-2007-2280—17 dic 2009
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager c
50RIESGO
abrir ↗
Metasploit500
HP OmniInet.exe MSG_PROTOCOL Buffer Overflow
CVE-2009-3844—17 dic 2009
Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and
60RIESGO
abrir ↗
Metasploit500
Open Flash Chart v2 Arbitrary File Upload
CVE-2009-4140—14 dic 2009
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer
60RIESGO
abrir ↗
Metasploit400
Adobe Doc.media.newPlayer Use After Free Vulnerability
CVE-2009-4324HIGHbajo ataque14 dic 2009
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before
100RIESGO
abrir ↗
Metasploit400
Adobe Doc.media.newPlayer Use After Free Vulnerability
CVE-2009-4324HIGHbajo ataque14 dic 2009
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before
100RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager ovalarm.exe CGI Buffer Overflow
CVE-2009-4179—09 dic 2009
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remo
50RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager OvWebHelp.exe CGI Buffer Overflow
CVE-2009-4178—09 dic 2009
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows rem
60RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager Snmp.exe CGI Buffer Overflow
CVE-2009-3849—09 dic 2009
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote att
60RIESGO
abrir ↗
Metasploit400
Audio Workstation 6.4.2.4.3 pls Buffer Overflow
CVE-2009-0476—08 dic 2009
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RIESGO
abrir ↗
Metasploit500
Novell iPrint Client ActiveX Control Date/Time Buffer Overflow
CVE-2009-1569—08 dic 2009
Multiple stack-based buffer overflows in Novell iPrint Client 4.38, 5.30, and possibly other versions before 5.32 allow
50RIESGO
abrir ↗
Metasploit500
Novell iPrint Client ActiveX Control target-frame Buffer Overflow
CVE-2009-1568—08 dic 2009
Stack-based buffer overflow in ienipp.ocx in Novell iPrint Client 5.30, and possibly other versions before 5.32, allows
50RIESGO
abrir ↗
Metasploit300
gAlan 0.2.1 Buffer Overflow
CVE-2009-20004HIGH07 dic 2009
gAlan <= 0.2.1 Buffer Overflow
36RIESGO
abrir ↗
Metasploit500
PointDev IDEAL Migration Buffer Overflow
CVE-2009-4265—05 dic 2009
Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to
50RIESGO
abrir ↗
Metasploit500
Adobe Illustrator CS4 v14.0.0
CVE-2009-4195—03 dic 2009
Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execu
60RIESGO
abrir ↗
Metasploit600
FreeBSD rtld execl() Privilege Escalation
CVE-2009-4146—30 nov 2009
The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not c
38RIESGO
abrir ↗
Metasploit600
FreeBSD rtld execl() Privilege Escalation
CVE-2009-4147—30 nov 2009
The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear t
38RIESGO
abrir ↗
Metasploit600
OpenX banner-edit.php File Upload PHP Code Execution
CVE-2009-4098—24 nov 2009
Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticate
43RIESGO
abrir ↗
Metasploit500
Erlang Port Mapper Daemon Cookie RCE
CVE-2020-24719—20 nov 2009
Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by
23RIESGO
abrir ↗
Metasploit300
MS09-072 Microsoft Internet Explorer Style getElementsByTagName Memory Corruption
CVE-2009-3672—20 nov 2009
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or
60RIESGO
abrir ↗
Metasploit500
HTTPDX tolog() Function Format String Vulnerability
CVE-2009-4769—17 nov 2009
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remo
50RIESGO
abrir ↗
Metasploit500
HTTPDX tolog() Function Format String Vulnerability
CVE-2009-4769—17 nov 2009
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remo
50RIESGO
abrir ↗
Metasploit600
AwingSoft Winds3D Player 3.5 SceneURL Download and Execute
CVE-2009-4850—14 nov 2009
The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneU
43RIESGO
abrir ↗
Metasploit300
Microsoft Windows EOT Font Table Directory Integer Overflow
CVE-2009-2514—10 nov 2009
win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse fon
50RIESGO
abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.