Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.780exploits catalogados

39.319CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.394Exploit-DB 24.485GitHub PoC 16.249VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

3523 exploits

Metasploit400

MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability

CVE-2009-3129HIGHbajo ataque10 nov 2009

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Conv

100RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-4189—09 nov 2009

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

60RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-3548—09 nov 2009

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

60RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-4188—09 nov 2009

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

50RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2009-3843—09 nov 2009

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all

60RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2010-0557—09 nov 2009

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial

50RIESGO

Metasploit600

Apache Tomcat Manager Application Deployer Authenticated Code Execution

CVE-2010-4094—09 nov 2009

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc

50RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-3548—09 nov 2009

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

60RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-4188—09 nov 2009

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

50RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-3843—09 nov 2009

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all

60RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2010-0557—09 nov 2009

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial

50RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2009-4189—09 nov 2009

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

60RIESGO

Metasploit600

Apache Tomcat Manager Authenticated Upload Code Execution

CVE-2010-4094—09 nov 2009

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc

50RIESGO

Metasploit300

Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow

CVE-2009-3033—04 nov 2009

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilitie

50RIESGO

Metasploit400

IBM Tivoli Storage Manager Express CAD Service Buffer Overflow

CVE-2009-3853—04 nov 2009

Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (T

50RIESGO

Metasploit500

Sun Java JRE getSoundbank file:// URI Buffer Overflow

CVE-2009-3867—04 nov 2009

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, J

60RIESGO

Metasploit500

Sun Java JRE AWT setDiffICM Buffer Overflow

CVE-2009-3869—04 nov 2009

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment

50RIESGO

Metasploit200

Hewlett-Packard Power Manager Administration Buffer Overflow

CVE-2009-2685—04 nov 2009

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers t

60RIESGO

Metasploit500

IBM Tivoli Storage Manager Express RCA Service Buffer Overflow

CVE-2008-4828—04 nov 2009

Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM

60RIESGO

Metasploit200

CA eTrust PestPatrol ActiveX Control Buffer Overflow

CVE-2009-4225—02 nov 2009

Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote

50RIESGO

Metasploit300

Symantec ConsoleUtilities ActiveX Control Buffer Overflow

CVE-2009-3031—02 nov 2009

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6

50RIESGO

Metasploit400

Rhinosoft Serv-U Session Cookie Buffer Overflow

CVE-2009-4006—01 nov 2009

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other ver

60RIESGO

Metasploit400

SafeNet SoftRemote GROUPNAME Buffer Overflow

CVE-2009-3861—30 oct 2009

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions bef

38RIESGO

Metasploit200

UFO: Alien Invasion IRC Client Buffer Overflow

CVE-2009-10006CRITICAL28 oct 2009

UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow

43RIESGO

Metasploit200

UFO: Alien Invasion IRC Client Buffer Overflow

CVE-2009-10006CRITICAL28 oct 2009

UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow

43RIESGO

Metasploit300

Eureka Email 2.2q ERR Remote Buffer Overflow

CVE-2009-3837—22 oct 2009

Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error m

50RIESGO

Metasploit500

Oracle 10gR2 TNS Listener AUTH_SESSKEY Buffer Overflow

CVE-2009-1979—20 oct 2009

Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote

60RIESGO

Metasploit400

Adobe U3D CLODProgressiveMeshDeclaration Array Overrun

CVE-2009-2990—13 oct 2009

Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might all

50RIESGO

Metasploit400

Adobe U3D CLODProgressiveMeshDeclaration Array Overrun

CVE-2009-3953HIGHbajo ataque13 oct 2009

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befor

100RIESGO

Metasploit400

Adobe FlateDecode Stream Predictor 02 Integer Overflow

CVE-2009-3459HIGHbajo ataque08 oct 2009

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows rem

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.