Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.057exploits catalogados
36.288CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8843Nuclei 4358Metasploit 3489✓ solo verificadosrecientespopularesriesgo
3477 exploits
Metasploit600
Visual Mining NetCharts Server Remote Code Execution
CVE-2014-8516—03 nov 2014
Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary co
60RIESGO
abrir ↗
Metasploit600
HP Data Protector 8.10 Remote Command Execution
CVE-2014-2623—02 nov 2014
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown
60RIESGO
abrir ↗
Metasploit600
tnftp "savefile" Arbitrary Command Execution
CVE-2014-8517—28 oct 2014
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro
50RIESGO
abrir ↗
Metasploit600
X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution
CVE-2014-8998—27 oct 2014
lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a c
50RIESGO
abrir ↗
Metasploit300
GNU Wget FTP Symlink Arbitrary Filesystem Access
CVE-2014-4877—27 oct 2014
Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to w
30RIESGO
abrir ↗
Metasploit300
WildFly Directory Traversal
CVE-2014-7816—22 oct 2014
Directory traversal vulnerability in JBoss Undertow 1.0.x before 1.0.17, 1.1.x before 1.1.0.CR5, and 1.2.x before 1.2.0.
23RIESGO
abrir ↗
Metasploit600
Wordpress Creative Contact Form Upload Vulnerability
CVE-2014-8739—22 oct 2014
Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery
60RIESGO
abrir ↗
Metasploit600
MS14-064 Microsoft Windows OLE Package Manager Code Execution
CVE-2014-6352HIGHbajo ataque21 oct 2014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
100RIESGO
abrir ↗
Metasploit600
Drupal HTTP Parameter Key/Value SQL Injection
CVE-2014-3704—15 oct 2014
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct
60RIESGO
abrir ↗
Metasploit600
Centreon SQL and Command Injection
CVE-2014-3828—15 oct 2014
Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3
60RIESGO
abrir ↗
Metasploit600
Centreon SQL and Command Injection
CVE-2014-3829—15 oct 2014
displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remot
60RIESGO
abrir ↗
Metasploit300
Windows TrackPopupMenu Win32k NULL Pointer Dereference
CVE-2014-4113HIGHbajo ataque14 oct 2014
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RIESGO
abrir ↗
Metasploit300
SSL/TLS Version Detection
CVE-2015-4000LOW14 oct 2014
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pro
45RIESGO
abrir ↗
Metasploit500
Adobe Flash Player casi32 Integer Overflow
CVE-2014-0569—14 oct 2014
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and bef
60RIESGO
abrir ↗
Metasploit300
SSL/TLS Version Detection
CVE-2022-3358—14 oct 2014
Using a Custom Cipher with NID_undef may lead to NULL encryption
18RIESGO
abrir ↗
Metasploit600
MS14-060 Microsoft Windows OLE Package Manager Code Execution
CVE-2014-4114HIGHbajo ataque14 oct 2014
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
100RIESGO
abrir ↗
Metasploit300
SSL/TLS Version Detection
CVE-2011-3389—14 oct 2014
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefo
40RIESGO
abrir ↗
Metasploit300
SSL/TLS Version Detection
CVE-2016-0800—14 oct 2014
The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se
40RIESGO
abrir ↗
Metasploit300
SSL/TLS Version Detection
CVE-2013-2566MEDIUM14 oct 2014
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for
50RIESGO
abrir ↗
Metasploit300
SSL/TLS Version Detection
CVE-2014-3566LOW14 oct 2014
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
45RIESGO
abrir ↗
Metasploit600
TWiki Debugenableplugins Remote Code Execution
CVE-2014-7236—09 oct 2014
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary
50RIESGO
abrir ↗
Metasploit300
BMC / Numara Track-It! Domain Administrator and SQL Server User Password Disclosure
CVE-2014-4872—07 oct 2014
BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbit
60RIESGO
abrir ↗
Metasploit600
Numara / BMC Track-It! FileStorageService Arbitrary File Upload
CVE-2014-4872—07 oct 2014
BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbit
60RIESGO
abrir ↗
Metasploit300
Android Open Source Platform (AOSP) Browser UXSS
CVE-2014-6041—04 oct 2014
The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribu
23RIESGO
abrir ↗
Metasploit300
MS15-001 Microsoft Windows NtApphelpCacheControl Improper Authorization Check
CVE-2015-0002—30 sep 2014
The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1,
43RIESGO
abrir ↗
Metasploit600
Joomla Akeeba Kickstart Unserialize Remote Code Execution
CVE-2014-7228—29 sep 2014
Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeb
50RIESGO
abrir ↗
Metasploit600
IPFire Bash Environment Variable Injection (Shellshock)
CVE-2014-6271CRITICALbajo ataque29 sep 2014
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗
Metasploit600
ManageEngine OpManager and Social IT Arbitrary File Upload
CVE-2014-6034—27 sep 2014
Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in Z
60RIESGO
abrir ↗
Metasploit600
Wordpress InfusionSoft Upload Vulnerability
CVE-2014-6446—25 sep 2014
The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows
50RIESGO
abrir ↗
Metasploit600
Apache mod_cgi Bash Environment Variable Code Injection (Shellshock)
CVE-2014-6271CRITICALbajo ataque24 sep 2014
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RIESGO
abrir ↗
← anteriorpágina 55 / 116siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.