Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.682exploits catalogados
39.953CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.887Exploit-DB 24.488GitHub PoC 17.378VulnCheck XDB 9888Nuclei 4513Metasploit 3528✓ solo verificadosrecientespopularesriesgo
25.887 exploits
Referência
CVE-2018-13417
CVE-2018-13417—
In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External E
28RIESGO
abrir ↗
Referência
CVE-2015-6018
CVE-2015-6018—
The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attac
28RIESGO
abrir ↗
Referência
CVE-2006-3656
CVE-2006-3656—
Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a c
28RIESGO
abrir ↗
Referência
CVE-2016-0951
CVE-2016-0951—
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RIESGO
abrir ↗
Referência
CVE-2018-1322
CVE-2018-1322—
An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupporte
28RIESGO
abrir ↗
Referência
CVE-2018-8120
CVE-2018-8120HIGHbajo ataqueransomware
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
100RIESGO
abrir ↗
Referência
CVE-2019-14312
CVE-2019-14312—
Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This v
43RIESGO
abrir ↗
Referência
CVE-2021-28164
CVE-2021-28164MEDIUM
In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contai
70RIESGO
abrir ↗
Referência✓ VexDay Proof
Google Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow
CVE-2008-6994—remotewindows
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.14
28RIESGO
abrir ↗
Referência
CVE-2023-45498
CVE-2023-45498CRITICAL
VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability
68RIESGO
abrir ↗
Referência
CVE-2023-45498
CVE-2023-45498CRITICAL
VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability
68RIESGO
abrir ↗
Referência
CVE-2018-5973
CVE-2018-5973—
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter,
28RIESGO
abrir ↗
Referência
CVE-2009-4725
CVE-2009-4725—
Directory traversal vulnerability in modules/aljazeera/admin/setup.php in Arab Portal 2.2 and earlier, when register_glo
23RIESGO
abrir ↗
Referência
CVE-2018-5973
CVE-2018-5973—
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter,
28RIESGO
abrir ↗
Referência
CVE-2019-9017
CVE-2019-9017—
DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the m
28RIESGO
abrir ↗
Referência
CVE-2019-9017
CVE-2019-9017—
DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the m
28RIESGO
abrir ↗
Referência
CVE-2013-1598
CVE-2013-1598—
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to th
28RIESGO
abrir ↗
Referência
CVE-2009-3863
CVE-2009-3863—
Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause
23RIESGO
abrir ↗
Referência✓ VexDay Proof
A-Blog 2.0 - 'menu.php' Remote File Inclusion
CVE-2006-5092—webappsphp
PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-4727
CVE-2009-4727—
SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitra
23RIESGO
abrir ↗
Referência
CVE-2017-3068
CVE-2017-3068—
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced V
28RIESGO
abrir ↗
Referência
CVE-2026-80119
CVE-2026-80119HIGH
PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL
41RIESGO
abrir ↗
Referência✓ VexDay Proof
eFront 3.5.1 / build 2710 - Arbitrary File Upload
CVE-2008-7026—webappsphp
Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote att
23RIESGO
abrir ↗
Referência
CVE-2026-105969
CVE-2026-105969MEDIUM
CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote Disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-105261
CVE-2026-105261MEDIUM
PublishPress Future 4.10.1 - 4.10.5 - Contributor+ Stored XSS via 'wrapper' and 'dateformat' Shortcode Attributes
33RIESGO
abrir ↗
Referência
CVE-2026-78839
CVE-2026-78839HIGH
An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading
41RIESGO
abrir ↗
Referência
CVE-2026-85381
CVE-2026-85381MEDIUM
light0011 cms Chapter Controller ChapterController.class.php authorization
33RIESGO
abrir ↗
Referência✓ VexDay Proof
WebFileExplorer 3.1 - Authentication Bypass
CVE-2009-1314—webappsphp
body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the s
28RIESGO
abrir ↗
Referência
CVE-2026-104751
CVE-2026-104751MEDIUM
Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion
33RIESGO
abrir ↗
Referência
CVE-2026-85380
CVE-2026-85380MEDIUM
light0011 cms UEditor controller.php catchimage server-side request forgery
33RIESGO
abrir ↗
← anteriorpágina 126 / 863siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.