Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
79.305exploits catalogados
36.465CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8883Nuclei 4361Metasploit 3493✓ solo verificadosrecientespopularesriesgo
19.066 exploits
Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe' (MaxAge) CGI Buffer Overflow (Metasploit)
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'nnmRptConfig.exe schdParams' Remote Buffer Overflow (Metasploit)
Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote at
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - nnmRptConfig nameParams Buffer Overflow (Metasploit)
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers t
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Progea Movicon 11 - 'TCPUploadServer' Remote File System
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, whi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe main' Remote Buffer Overflow (Metasploit)
Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers t
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe' Unrecognized Option Buffer Overflow (Metasploit)
Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.5
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - AVM Bytecode Verification (Metasploit)
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.1
98RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) - CGI 'webappmon.exe OvJavaLocale' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote at
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Advantech/BroadWin SCADA Webaccess 7.0 - Multiple Vulnerabilities
webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Perl 5.x - 'Perl_reg_numbered_buff_fetch()' Remote Denial of Service
The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debuggin
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe ovutil' Remote Buffer Overflow (Metasploit)
Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remo
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'snmpviewer.exe' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01,
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP Network Node Manager (NMM) - CGI 'webappmon.exe execvp' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure
Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) H
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Netware - NWFTPD.NLM DELE Remote Code Execution
Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Douran 3.9.7.8 - File Download/Source Code Disclosure
download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web ro
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
RealNetworks RealPlayer - CDDA URI Initialization (Metasploit)
An ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterpr
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe ColdFusion - Directory Traversal (Metasploit)
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re
100RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Applet2ClassLoader - Remote Code Execution (Metasploit)
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for B
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SugarCRM 6.1.1 - Information Disclosure
SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain dupl
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Performance Insight Server - Backdoor Account Code Execution (Metasploit)
HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.secu
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Google Android 2.0/2.1/2.1.1 - WebKit Use-After-Free
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari befo
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.3.6 - 'shmop_read()' Integer Overflow Denial of Service
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of servic
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
SmarterMail 7.3/7.4 - Multiple Vulnerabilities
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbi
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.3.x 'Zip' Extension - 'stream_get_contents()' Denial of Service
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP < 5.3.6 'Zip' Extension - 'zip_fread()' Denial of Service
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.3.x 'Intl' Extension - 'NumberFormatter::setSymbol()' Denial of Service
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PH
28RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Xinha 0.96 - 'spell-check-savedicts.php' Multiple HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve for Laptops & Desktops LGServer - 'rxsSetDataGrowthScheduleAndFilter' Remote Buffer Overflow (Metasploit)
Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops a
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Polic
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.