Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.108exploits catalogados
36.322CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8846Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
24.695 exploits
Exploit-DB✓ VexDay Proof
Simple HRM System 2.3 - Multiple Vulnerabilities
SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earli
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Spider Video Player - 'theme' SQL Injection
SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Request Tracker - 'ShowPending' SQL Injection
SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and pos
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Spiffy XSPF Player - 'playlist_id' SQL Injection
SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers t
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authenticat
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted dir
83RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin - 'tbl_gis_visualization.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earli
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
ZAPms 1.41 - SQL Injection
SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OTRS 3.x - FAQ Module Persistent Cross-Site Scripting
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MongoDB 2.2.3 - nativeHelper.apply Remote Code Execution
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
MongoDB - nativeHelper.apply Remote Code Execution (Metasploit)
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Groovy Media Player 3.2.0 - '.mp3' Buffer Overflow
Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10 SP3/11 SP2 - Remote Execution (Metasploit)
The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform a
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Zimbra - 'aspell.php' Cross-Site Scripting
Zimbra 2013 has XSS in aspell.php
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/traffic.php?var' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/router.php?BasicLogin' Cookie SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/reset_password_save.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/admin_index.php?q' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/edit_user_save.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/edit_user.php?id' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/user_add_save.php?email' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/checklogin.php?Username' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/delete_user.php?id' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Subversion - Remote Denial of Service
The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial o
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/linktick.php?site' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/reset_password.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Subversion 1.6.x - 'mod_dav_svn/lock.c' Remote Denial of Service
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote atta
35RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox - Cookie Verification Denial of Service
Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.