Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados
39.383CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
25.447 exploits
Referência✓ VexDay Proof
Jadu CMS for Government - 'recruit_details.php' SQL Injection
CVE-2008-5988—webappsphp
SQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2022-20707
CVE-2022-20707CRITICAL
Cisco Small Business RV Series Routers Vulnerabilities
85RIESGO
abrir ↗
Referência
CVE-2018-14335
CVE-2018-14335MEDIUM
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read
38RIESGO
abrir ↗
Referência
CVE-2018-8298
CVE-2018-8298HIGHbajo ataque
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,
93RIESGO
abrir ↗
Referência
CVE-2021-36711
CVE-2021-36711—
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.
28RIESGO
abrir ↗
Referência✓ VexDay Proof
SG Real Estate Portal 2.0 - Insecure Cookie Handling
CVE-2008-6009—webappsphp
SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the
23RIESGO
abrir ↗
Referência
CVE-2026-19928
CVE-2026-19928MEDIUM
OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management
33RIESGO
abrir ↗
Referência
CVE-2026-19927
CVE-2026-19927MEDIUM
OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2017-1000373
CVE-2017-1000373—
The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Xero Portal - 'phpbb_root_path' Remote File Inclusion
CVE-2007-0561—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP co
28RIESGO
abrir ↗
Referência✓ VexDay Proof
Alstrasoft Video Share Enterprise 4.5.1 - 'UID' SQL Injection
CVE-2008-3386—webappsphp
SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Tech Article 1.x - SQL Injection
CVE-2008-6050—webappsphp
SQL injection vulnerability in the Tech Articles (com_tech_article) 1.0 component for Joomla! allows remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Daily Message 1.0.3 - 'id' SQL Injection
CVE-2008-6076—webappsphp
SQL injection vulnerability in the Daily Message (com_dailymessage) 1.0.3 component for Joomla! allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Scriptsez Mini Hosting Panel - 'members.php' Local File Inclusion
CVE-2008-6090—webappsphp
Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BMForum 5.6 - 'tagname' SQL Injection
CVE-2008-6091—webappsphp
SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2008-6132
CVE-2008-6132—
Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo
43RIESGO
abrir ↗
Referência
CVE-2010-3856
CVE-2010-3856—
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use
43RIESGO
abrir ↗
Referência✓ VexDay Proof
HIOX Browser Statistics 2.0 - Remote File Inclusion
CVE-2008-3402—webappsphp
Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ASP NEWS 3.0 - 'news_detail.asp' SQL Injection
CVE-2007-0566—webappsasp
SQL injection vulnerability in news_detail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Drunken:Golem Portal 0.5.1 Alpha 2 - Remote File Inclusion
CVE-2007-0572—webappsphp
PHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal 0.5.1 Alpha 2 and earli
23RIESGO
abrir ↗
Referência✓ VexDay Proof
nsGalPHP - '/includes/config.inc.php?racineTBS' Remote File Inclusion
CVE-2007-0573—webappsphp
PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Virtual Path 1.0 - '/vp/configure.php' Remote File Inclusion
CVE-2007-0591—webappsphp
PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2011-4808
CVE-2011-4808—
SQL injection vulnerability in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering
CVE-2008-3400—webappsphp
XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, whic
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pligg 9.9.5b - Arbitrary File Upload / SQL Injection
CVE-2008-5739—webappsphp
SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BulletProof FTP Client 2.63 - Local Heap Overflow (PoC)
CVE-2008-5753—doswindows
Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OwenPoll 1.0 - Insecure Cookie Handling
CVE-2008-6143—webappsphp
OwenPoll 1.0 allows remote attackers to bypass authentication and obtain administrative access via a modified account na
23RIESGO
abrir ↗
Referência
CVE-2026-19923
CVE-2026-19923MEDIUM
code-projects Online Shopping System checkout_process.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2022-27925
CVE-2022-27925HIGHbajo ataqueransomware
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file
100RIESGO
abrir ↗
Referência
CVE-2024-12987
CVE-2024-12987MEDIUMbajo ataque
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
100RIESGO
abrir ↗
página 1 / 849siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.