Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

84.600exploits catalogados

39.734CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.742Exploit-DB 24.486GitHub PoC 16.618VulnCheck XDB 9736Nuclei 4493Metasploit 3525✓ solo verificadosrecientes populares riesgo

4493 exploits

Nucleihigh

SolarWinds Security Event Manager - Unauthenticated RCE

CVE-2024-0692HIGH

SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

78RIESGO

abrir ↗

Nucleicritical

Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection

CVE-2024-0705CRITICAL

Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection

43RIESGO

abrir ↗

Nucleicritical

Arcserve Unified Data Protection - Authentication Bypass

CVE-2024-0799CRITICAL

Authentication Bypass via wizardLogin in Arcserve Unified Data Protection

43RIESGO

abrir ↗

Nucleihigh

Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll

CVE-2024-0801HIGH

Unauthenticated DoS in Arcserve Unified Data Protection

48RIESGO

abrir ↗

Nucleimedium

Combo Blocks < 2.2.76 - Improper Access Control

CVE-2024-0881MEDIUM

Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access

33RIESGO

abrir ↗

Nucleicritical

Smart S210 Management Platform - Arbitary File Upload

CVE-2024-0939MEDIUM

Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload

40RIESGO

abrir ↗

Nucleimedium

Issabel Authenticated - Remote Code Execution

CVE-2024-0986MEDIUM

Issabel PBX Asterisk-Cli os command injection

40RIESGO

abrir ↗

Nucleicritical

CodeChecker <= 6.24.1 - Authentication Bypass

CVE-2024-10081CRITICAL

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

55RIESGO

abrir ↗

Nucleimedium

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

CVE-2024-10146MEDIUM

Simple File List < 6.1.13 - Reflected Cross-Site Scripting

28RIESGO

abrir ↗

Nucleihigh

Simple Certain Time to Show Content - Cross-Site Scripting

CVE-2024-10152HIGH

Simple Certain Time to Show Content < 1.3.1 - Reflected XSS

36RIESGO

abrir ↗

Nucleicritical

Rebuild <= 3.5.5 - Server-Side Request Forgery

CVE-2024-1021MEDIUM

Rebuild HTTP Request readRawText server-side request forgery

40RIESGO

abrir ↗

Nucleihigh

Tutor LMS <= 2.7.6 - SQL Injection

CVE-2024-10400HIGH

Tutor LMS <= 2.7.6 - Unauthenticated SQL Injection via rating_filter

78RIESGO

abrir ↗

Nucleimedium

Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File

CVE-2024-10486MEDIUM

Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File

28RIESGO

abrir ↗

Nucleimedium

LifterLMS < 8.0.1 - Cross-Site Scripting

CVE-2024-13619MEDIUM

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 8.0.1 - Reflected XSS

28RIESGO

abrir ↗

Nucleihigh

WordPress WPMovieLibrary Plugin <= 2.1.4.8 - Cross-Site Scripting

CVE-2024-13624HIGH

WPMovieLibrary <= 2.1.4.8 - Reflected XSS

36RIESGO

abrir ↗

Nucleihigh

Tube Video Ads Lite - Reflected XSS

CVE-2024-13625HIGH

Tube Video Ads Lite <= 1.5.7 - Reflected XSS

36RIESGO

abrir ↗

Nucleimedium

OWL Carousel Slider - Cross-Site Scripting

CVE-2024-13627MEDIUM

WP Touch Slider <= 2.2 - Reflected XSS

28RIESGO

abrir ↗

Nucleimedium

WP Pricing Table - Reflected XSS

CVE-2024-13628MEDIUM

WP Pricing Table <= 1.1 - Reflected XSS

28RIESGO

abrir ↗

Nucleimedium

NewsTicker <= 1.0 - Reflected Cross-Site Scripting

CVE-2024-13630MEDIUM

News List <= 1.0 - Reflected XSS

28RIESGO

abrir ↗

Nucleimedium

Post Sync Plugin <= 1.1 - Cross-Site Scripting

CVE-2024-13634MEDIUM

Post Sync <= 1.1 - Reflected XSS

28RIESGO

abrir ↗

Nucleihigh

Themes Coder Ecommerce <= 1.3.4 - SQL Injection

CVE-2024-13726HIGH

Themes Coder <= 1.3.4 - Unauthenticated SQLi

36RIESGO

abrir ↗

Nucleimedium

MemberSpace WordPress - Cross-Site Scripting

CVE-2024-13727MEDIUM

MemberSpace – Membership Plugin and Paid Subscriptions < 2.1.14 - Reflected XSS

28RIESGO

abrir ↗

Nucleimedium

Relevanssi (A Better Search) <= 4.22.0 - Query Log Export

CVE-2024-1380MEDIUM

Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export

40RIESGO

abrir ↗

Nucleimedium

WordPress SEO Tools Plugin 4.0.7 - Cross-Site Scripting

CVE-2024-13853MEDIUM

SEO Tools <= 4.0.7 - Reflected XSS

28RIESGO

abrir ↗

Nucleihigh

WPMobile.App <= 11.56 - Open Redirect

CVE-2024-13888HIGH

WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter

36RIESGO

abrir ↗

Nucleicritical

St. Joe ERP system - SQL Injection

CVE-2024-13979CRITICAL

St. Joe ERP System SingleRowQueryConverter SQL Injection

63RIESGO

abrir ↗

Nucleicritical

Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle

CVE-2024-13985CRITICAL

Dahua EIMS capture_handle.action RCE

68RIESGO

abrir ↗

Nucleimedium

Studiocart <= 2.9.0 - Cross-Site Scripting

CVE-2024-14015HIGH

Studiocart <= 2.9.0 - Reflected XSS

36RIESGO

abrir ↗

Nucleihigh

Mlflow < 2.9.2 - Path Traversal

CVE-2024-1483HIGH

Path Traversal Vulnerability in mlflow/mlflow

36RIESGO

abrir ↗

Nucleicritical

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

CVE-2024-1512CRITICAL

MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection

85RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.