Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados
40.037CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientespopularesriesgo
25.956 exploits
Referência
CVE-2019-1914
CVE-2019-1914HIGH
Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability
46RIESGO
abrir ↗
Referência
CVE-2021-22146
CVE-2021-22146—
All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters.
35RIESGO
abrir ↗
Referência
CVE-2015-8358
CVE-2015-8358—
Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators t
23RIESGO
abrir ↗
Referência
CVE-2017-2363
CVE-2017-2363—
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ExBB 0.22 - Local/Remote File Inclusion
CVE-2008-1861—webappsphp
Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_gl
23RIESGO
abrir ↗
Referência
CVE-2013-2121
CVE-2013-2121—
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote
43RIESGO
abrir ↗
Referência
CVE-2013-4859
CVE-2013-4859—
INSTEON Hub 2242-222 lacks Web and API authentication
23RIESGO
abrir ↗
Referência
CVE-2017-15270
CVE-2017-15270—
The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) f
23RIESGO
abrir ↗
Referência
CVE-2014-3008
CVE-2014-3008—
Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacte
23RIESGO
abrir ↗
Referência
CVE-2015-2511
CVE-2015-2511—
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
23RIESGO
abrir ↗
Referência
CVE-2015-2518
CVE-2015-2518—
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
23RIESGO
abrir ↗
Referência
CVE-2015-6763
CVE-2015-6763—
Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service o
23RIESGO
abrir ↗
Referência
CVE-2015-6763
CVE-2015-6763—
Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service o
23RIESGO
abrir ↗
Referência
CVE-2017-15270
CVE-2017-15270—
The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) f
23RIESGO
abrir ↗
Referência
CVE-2010-4301
CVE-2010-4301—
epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers t
23RIESGO
abrir ↗
Referência
CVE-2017-2932
CVE-2017-2932—
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript
28RIESGO
abrir ↗
Referência
CVE-2009-4553
CVE-2009-4553—
Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or pos
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Bankoi Webhost Panel 1.20 - Authentication Bypass
CVE-2008-6950—webappsasp
Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2010-0677
CVE-2010-0677—
SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2015-8358
CVE-2015-8358—
Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators t
23RIESGO
abrir ↗
Referência
CVE-2010-4968
CVE-2010-4968—
SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote
23RIESGO
abrir ↗
Referência
CVE-2023-3847
CVE-2023-3847LOW
mooSocial mooDating URL users cross site scripting
43RIESGO
abrir ↗
Referência
CVE-2017-2464
CVE-2017-2464—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Referência
CVE-2026-110775
CVE-2026-110775HIGH
Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access
41RIESGO
abrir ↗
Referência
CVE-2016-0075
CVE-2016-0075—
The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 160
23RIESGO
abrir ↗
Referência
CVE-2017-0781
CVE-2017-0781—
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1
28RIESGO
abrir ↗
Referência
CVE-2021-22204
CVE-2021-22204MEDIUMbajo ataque
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RIESGO
abrir ↗
Referência
CVE-2023-5204
CVE-2023-5204CRITICAL
AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response
63RIESGO
abrir ↗
Referência
CVE-2009-0812
CVE-2009-0812—
Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions all
23RIESGO
abrir ↗
Referência
CVE-2018-6064
CVE-2018-6064—
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote
23RIESGO
abrir ↗
← anteriorpágina 146 / 866siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.