Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.445exploits catalogados
34.432CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8198Nuclei 4217Metasploit 3463✓ solo verificadosrecientespopularesriesgo
21.497 exploits
Referência✓ VexDay Proof
Opera Web Browser 9.00 - 'iframe' Remote Denial of Service
CVE-2006-3353—dosmultiple
Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-boun
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Foxit Reader 2.0 - 'PDF' Remote Denial of Service
CVE-2007-2186—doswindows
Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Opera 9.2 - '.torrent' Remote Denial of Service
CVE-2007-2274—dosmultiple
The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and app
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities
CVE-2007-2372—webappsphp
admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Data Dynamics ActiveBar (Actbar3.ocx 3.2) - Multiple Insecure Methods
CVE-2007-3883—remotewindows
The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Data Dynamics ActiveBar - ActiveX 'actbar3.ocx 3.1' Insecure Methods
CVE-2007-3883—remotewindows
The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite
23RIESGO
abrir ↗
Referência✓ VexDay Proof
X-Cart - Multiple Remote File Inclusions
CVE-2007-4907—webappsphp
Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a
23RIESGO
abrir ↗
Referência
CVE-2019-16645
CVE-2019-16645—
An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) cre
23RIESGO
abrir ↗
Referência
CVE-2019-15501
CVE-2019-15501—
Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.
38RIESGO
abrir ↗
Referência
CVE-2015-7564
CVE-2015-7564—
Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Internet Download Accelerator 5.2 - Remote Buffer Overflow (PoC)
CVE-2007-3162—doswindows
Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac
23RIESGO
abrir ↗
Referência
CVE-2013-5528
CVE-2013-5528—
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all
43RIESGO
abrir ↗
Referência
CVE-2010-1607
CVE-2010-1607—
Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0
38RIESGO
abrir ↗
Referência
CVE-2015-5696
CVE-2015-5696—
Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.
23RIESGO
abrir ↗
Referência
CVE-2015-5696
CVE-2015-5696—
Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.
23RIESGO
abrir ↗
Referência
CVE-2020-8947
CVE-2020-8947—
functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metac
28RIESGO
abrir ↗
Referência
CVE-2010-1715
CVE-2010-1715—
Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joom
38RIESGO
abrir ↗
Referência
CVE-2010-1469
CVE-2010-1469—
Directory traversal vulnerability in the Ternaria Informatica JProject Manager (com_jprojectmanager) component 1.0 for J
38RIESGO
abrir ↗
Referência✓ VexDay Proof
Pluxml 0.3.1 - Remote Code Execution
CVE-2007-3432—webappsphp
Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute
23RIESGO
abrir ↗
Referência
CVE-2013-5528
CVE-2013-5528—
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all
43RIESGO
abrir ↗
Referência✓ VexDay Proof
KVIrc 3.4.0 - Virgo Remote Format String (PoC)
CVE-2008-4748—doswindows
Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC UR
23RIESGO
abrir ↗
Referência
CVE-2009-3704
CVE-2009-3704—
ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service
23RIESGO
abrir ↗
Referência
CVE-2020-25495
CVE-2020-25495—
A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote at
38RIESGO
abrir ↗
Referência✓ VexDay Proof
AsteriDex 3.0 - 'callboth.php' Remote Code Execution
CVE-2007-3621—webappsphp
Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PicoFlat CMS 0.5.9 (Windows) - Local File Inclusion
CVE-2008-6604—webappsphp
Directory traversal vulnerability in index.php in PicoFlat CMS 0.5.9 allows remote attackers to include and execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BT-sondage 1.12 - 'gestion_sondage.php' Remote File Inclusion
CVE-2007-1812—webappsphp
PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Jasmine CMS 1.0 - SQL Injection / Remote Code Execution
CVE-2007-3313—webappsphp
Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)
CVE-2007-3006—doswindows
Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .a
23RIESGO
abrir ↗
Referência
CVE-2020-9372
CVE-2020-9372—
The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BitDefender Online Scanner 8 - ActiveX Heap Overflow
CVE-2007-6189—remotewindows
A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remo
23RIESGO
abrir ↗
← anteriorpágina 159 / 717siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.