Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 2.0.3 - '.png' ReadAV Crash (PoC)
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Excel - Denial of Service
Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cau
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel UDEV < 1.4.1 - 'Netlink' Local Privilege Escalation (Metasploit)
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to ga
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.2.2 - 'server_sync.php' Backdoor (Metasploit)
phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an e
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'AfdJoinLeaf' Local Privilege Escalation (MS11-080) (Metasploit)
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly valid
98RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTR - ActiveX Control 'StopModule()' Remote Code Execution (Metasploit)
The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
InduSoft Web Studio - Arbitrary File Upload / Remote Code Execution (Metasploit)
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require au
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Avaya IP Office Customer Call Reporter - 'ImageUpload.ashx' Remote Command Execution (Metasploit)
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - execCommand Use-After-Free (MS12-063) (Metasploit)
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 al
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
OpenX 2.8.10 - 'plugin-index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
NTR - ActiveX Control 'Check()' Method Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitr
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.4.16/3.5.14/3.6.4 - SetInformationPolicy AuditEventsInfo Heap Overflow (Metasploit)
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement valida
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Webmin 1.580 - '/file/show.cgi' Remote Command Execution (Metasploit)
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS Mobile Safari - LibTIFF Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS Mobile Mail - LibTIFF Buffer Overflow (Metasploit)
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS Mobile Safari - LibTIFF Buffer Overflow (Metasploit)
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.2.x - 'uname()' System Call Local Information Disclosure
The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive i
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS Mobile Mail - LibTIFF Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
JPEGsnoop 1.5.2 - WriteAV Crash (PoC)
A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PowerTCP WebServer for - ActiveX Denial of Service
Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro Control Manager 5.5/6.0 AdHocQuery - (Authenticated) Blind SQL Injection
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 b
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin MF Gig Calendar - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to in
38RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Groupwise 8.0.2 HP3 and 2012 - Integer Overflow
Integer overflow in the WebConsole component in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 befo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CoSoSys Endpoint Protector - Predictable Password Generation
The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Google Chrome for Android - com.android.browser.application_id Intent Extra Data Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inje
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Winamp - MAKI Buffer Overflow (Metasploit)
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Google Chrome for Android - Same-origin Policy Bypass Local Symlink
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Google Chrome for Android - Local Application Handling Cookie Theft
Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted applicat
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Google Chrome for Android - Multiple 'file::' URL Handler Local Downloaded Content Disclosure Vulnerabilities
Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attack
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
libguac - Remote Buffer Overflow
Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote a
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.