Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.234exploits catalogados

34.798CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.796GitHub PoC 13.831VulnCheck XDB 8460Nuclei 4237Metasploit 3467✓ solo verificadosrecientes populares riesgo

8460 exploits

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque10 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque09 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque09 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHbajo ataque07 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2012-3153—28 ene 2014

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and

60RIESGO

VulnCheck XDB

local

CVE-2013-6282HIGHbajo ataque21 dic 2013

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not

98RIESGO

VulnCheck XDB

client-side

CVE-2013-3893HIGHbajo ataque15 oct 2013

Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 throug

100RIESGO

VulnCheck XDB

local

CVE-2013-2595—03 oct 2013

The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm

23RIESGO

VulnCheck XDB

initial-access

CVE-2022-22954CRITICALbajo ataqueransomware01 oct 2013

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

VulnCheck XDB

denial-of-service

CVE-2013-1300—09 sep 2013

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W

43RIESGO

VulnCheck XDB

local

CVE-2013-2596HIGHbajo ataque16 jul 2013

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain

71RIESGO

VulnCheck XDB

initial-access

CVE-2013-2597HIGHbajo ataque11 jun 2013

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6

71RIESGO

VulnCheck XDB

local

CVE-2013-2094HIGHbajo ataque05 jun 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RIESGO

VulnCheck XDB

local

CVE-2013-2094HIGHbajo ataque20 may 2013

The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t

83RIESGO

VulnCheck XDB

remote-with-credentials

CVE-2013-2729HIGHbajo ataque15 may 2013

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attack

83RIESGO

VulnCheck XDB

denial-of-service

CVE-2013-0156—11 ene 2013

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RIESGO

VulnCheck XDB

local

CVE-2012-0056—29 dic 2012

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when

28RIESGO

VulnCheck XDB

client-side

CVE-2018-8174HIGHbajo ataqueransomware01 ene 0001

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RIESGO

VulnCheck XDB

client-side

CVE-2018-0802HIGHbajo ataque01 ene 0001

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow

93RIESGO

VulnCheck XDB

local

CVE-2019-0211HIGHbajo ataque01 ene 0001

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RIESGO

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALbajo ataqueransomware01 ene 0001

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

VulnCheck XDB

local

CVE-2021-1732HIGHbajo ataqueransomware01 ene 0001

Windows Win32k Elevation of Privilege Vulnerability

100RIESGO

VulnCheck XDB

initial-access

CVE-2019-11580CRITICALbajo ataqueransomware01 ene 0001

Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attac

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-20699CRITICALbajo ataque01 ene 0001

Cisco Small Business RV Series Routers Vulnerabilities

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.