Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.107exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3490✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
CVE-2013-1594—webappshardware01 may 2013
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FuzeZip 1.0.0.131625 - Local Buffer Overflow (SEH)
CVE-2013-5656—localwindows01 may 2013
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
CVE-2013-1598—webappshardware01 may 2013
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to th
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WinArchiver 3.2 - Local Buffer Overflow (SEH)
CVE-2013-5660—localwindows01 may 2013
Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip f
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
CVE-2013-1602—webappshardware01 may 2013
An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP ses
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
CVE-2013-1596—webappshardware01 may 2013
An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP pac
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
CVE-2013-1601—webappshardware01 may 2013
An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processin
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Cisco Linksys E4200 - '/apply.cgi' Multiple Cross-Site Scripting Vulnerabilities
CVE-2013-2679—remotehardware27 abr 2013
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow rem
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! 3.0.3 - 'remember.php' PHP Object Injection
CVE-2013-3242—webappsphp26 abr 2013
plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an o
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Light HTTPd 0.1 (Windows) - Remote Buffer Overflow
CVE-2002-1549—remotewindows25 abr 2013
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET reques
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
CVE-2013-3240—webappsphp25 abr 2013
Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated u
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
CVE-2013-3238—webappsphp25 abr 2013
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a
43RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
CVE-2013-3241—webappsphp25 abr 2013
export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the co
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Belkin F5D8236-4 Router - Cross-Site Request Forgery
CVE-2013-3083—remotehardware25 abr 2013
Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GroundWork - 'monarch_scan.cgi' OS Command Injection (Metasploit)
CVE-2013-3502—remotelinux25 abr 2013
monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to ex
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
CVE-2013-3239—webappsphp25 abr 2013
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authentica
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TP-Link TL-WR1043N Router - Cross-Site Request Forgery
CVE-2013-2645—remotehardware24 abr 2013
Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_12
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WordPress Plugin WP Super Cache - PHP Remote Code Execution
CVE-2013-2009—webappsphp24 abr 2013
WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Java Applet - Reflection Type Confusion Remote Code Execution (Metasploit)
CVE-2013-2423LOWbajo ataqueremotemultiple23 abr 2013
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and
95RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_civicrm 4.2.2 - Remote Code Injection
CVE-2009-4140—webappsphp22 abr 2013
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer
60RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joomla! Component com_civicrm 4.2.2 - Remote Code Injection
CVE-2011-4275—webappsphp22 abr 2013
Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link DIR-865L - Cross-Site Request Forgery
CVE-2013-3095—remotehardware19 abr 2013
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Pwstore - Denial of Service
CVE-2013-5657—doswindows16 abr 2013
AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpVms Virtual Airline Administration 2.1.934/2.1.935 - SQL Injection
CVE-2013-3524—webappsphp15 abr 2013
SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remot
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 3.2.1 - Tracing Multiple Local Denial of Service Vulnerabilities
CVE-2013-3301—doslinux15 abr 2013
The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Todoo Forum 2.0 - 'todooforum.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2013-3538—webappsphp14 abr 2013
Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to injec
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Todoo Forum 2.0 - 'todooforum.php' Multiple SQL Injections
CVE-2013-3537—webappsphp14 abr 2013
Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Nagios Remote Plugin Executor - Arbitrary Command Execution (Metasploit)
CVE-2013-1362—remotelinux12 abr 2013
Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote att
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
KNet Web Server 1.04b - Stack Corruption Buffer Overflow
CVE-2005-0575—remotewindows12 abr 2013
Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possib
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Allied Telesyn TFTP (AT-TFTP) Server/Daemon 2.0 - Stack Buffer Overflow (Denial of Service) (PoC)
CVE-2006-6184—doswindows12 abr 2013
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RIESGO
abrir ↗
← anteriorpágina 107 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.