Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
71.957exploits catalogados
32.195CVEs con explotación pública
1932probados en laboratorio
TodosExploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8182Nuclei 4217Metasploit 3462✓ solo verificadosrecientespopularesriesgo
4217 exploits
Nucleihigh
Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution
Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE
40RIESGO
abrir ↗Nucleimedium
Ghost CMS - User Enumeration
A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted
33RIESGO
abrir ↗Nucleihigh
F5 BIG-IP Appliance Mode - Command Injection
Appliance mode iControl REST vulnerability
68RIESGO
abrir ↗Nucleicritical
Welcart eCommerce <=2.7.7 - Local File Inclusion
WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability
36RIESGO
abrir ↗Nucleimedium
Backdrop CMS version 1.23.0 - Stored Cross Site Scripting
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' c
28RIESGO
abrir ↗Nucleimedium
Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page con
28RIESGO
abrir ↗Nucleimedium
Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content
28RIESGO
abrir ↗Nucleimedium
Liferay Portal - Cross-site Scripting
A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Lifera
28RIESGO
abrir ↗Nucleicritical
kkFileView 4.0 - Server-Side Request Forgery
kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.
43RIESGO
abrir ↗Nucleicritical
pgAdmin < 6.17 - Unauthenticated Remote Code Execution
The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external Post
58RIESGO
abrir ↗Nucleicritical
Tenda 11N - Authentication Bypass
Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.
55RIESGO
abrir ↗Nucleimedium
WordPress WP-Ban <1.69.1 - Stored Cross-Site Scripting
WP-Ban < 1.69.1 - Admin+ Stored XSS
28RIESGO
abrir ↗Nucleimedium
CandidATS 3.0.0 - Cross-Site Scripting.
CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of ar
28RIESGO
abrir ↗Nucleimedium
CandidATS 3.0.0 - Cross-Site Scripting.
CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbit
28RIESGO
abrir ↗Nucleimedium
CandidATS 3.0.0 - Cross-Site Scripting.
CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie o
28RIESGO
abrir ↗Nucleimedium
CandidATS 3.0.0 - Cross-Site Scripting
CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitra
28RIESGO
abrir ↗Nucleimedium
Show all comments < 7.0.1 - Cross-Site Scripting
Show All Comments < 7.0.1 - Reflected XSS
28RIESGO
abrir ↗Nucleimedium
WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting
Sunshine Photo Cart < 2.9.15 - Reflected XSS
28RIESGO
abrir ↗Nucleimedium
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parame
28RIESGO
abrir ↗Nucleimedium
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage pa
28RIESGO
abrir ↗Nucleimedium
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback componen
28RIESGO
abrir ↗Nucleimedium
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFile compone
28RIESGO
abrir ↗Nucleimedium
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email parameter i
28RIESGO
abrir ↗Nucleicritical
Login as User or Customer < 3.3 - Privilege Escalation
Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin
75RIESGO
abrir ↗Nucleimedium
WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting
Panda Pods Repeater Field < 1.5.4 - Reflected XSS
28RIESGO
abrir ↗Nucleihigh
kkFileView 4.1.0 - Server-Side Request Forgery
kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.control
36RIESGO
abrir ↗Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
A stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/index.php?module=global_lists/lists) of
28RIESGO
abrir ↗Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
A stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php?module=global_vars/vars) o
28RIESGO
abrir ↗Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
A stored cross-site scripting (XSS) vulnerability in the Global Entities feature (/index.php?module=entities/entities) o
28RIESGO
abrir ↗Nucleimedium
Rukovoditel <= 3.2.1 - Cross Site Scripting
A stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module=users_alerts/users_aler
28RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.