Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados

40.037CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientes populares riesgo

25.956 exploits

Referência

CVE-2010-1597

CVE-2010-1597—

Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbit

28RIESGO

abrir ↗

Referência

CVE-2011-1525

CVE-2011-1525—

Heap-based buffer overflow in rvrender.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.2, and R

28RIESGO

abrir ↗

Referência

CVE-2009-4749

CVE-2009-4749—

Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência

CVE-2014-8673

CVE-2014-8673—

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Microsoft Word 2007 - Multiple Vulnerabilities

CVE-2007-1911—doswindows

Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU con

28RIESGO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component - Denial of Service

CVE-2007-3169—doswindows

Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and

28RIESGO

abrir ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RIESGO

abrir ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RIESGO

abrir ↗

Referência

CVE-2013-10069

CVE-2013-10069CRITICAL

D-Link Devices Unauthenticated RCE

68RIESGO

abrir ↗

Referência

CVE-2026-81402

CVE-2026-81402CRITICAL

DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload

48RIESGO

abrir ↗

Referência

CVE-2020-3118

CVE-2020-3118HIGHbajo ataque

Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

76RIESGO

abrir ↗

Referência

CVE-2017-17739

CVE-2017-17739—

The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html

28RIESGO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6494—webappsasp

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/a

28RIESGO

abrir ↗

Referência

CVE-2019-8387

CVE-2019-8387—

MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.

35RIESGO

abrir ↗

Referência

CVE-2015-6912

CVE-2015-6912—

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharact

28RIESGO

abrir ↗

Referência

CVE-2023-0159

CVE-2023-0159—

Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

50RIESGO

abrir ↗

Referência

CVE-2018-8468

CVE-2018-8468—

An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privil

28RIESGO

abrir ↗

Referência

CVE-2019-17132

CVE-2019-17132—

vBulletin through 5.5.4 mishandles custom avatars.

28RIESGO

abrir ↗

Referência

CVE-2026-80494

CVE-2026-80494HIGH

Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download

41RIESGO

abrir ↗

Referência✓ VexDay Proof

Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload

CVE-2008-0457—remotewindows

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, a

28RIESGO

abrir ↗

Referência✓ VexDay Proof

AspWebCalendar 2008 - Arbitrary File Upload

CVE-2008-2832—webappsasp

Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attack

28RIESGO

abrir ↗

Referência

CVE-2018-8947

CVE-2018-8947—

rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easi

28RIESGO

abrir ↗

Referência

CVE-2023-26068

CVE-2023-26068CRITICAL

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

68RIESGO

abrir ↗

Referência

CVE-2014-3976

CVE-2014-3976—

Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allow

28RIESGO

abrir ↗

Referência

CVE-2020-1380

CVE-2020-1380HIGHbajo ataque

Scripting Engine Memory Corruption Vulnerability

76RIESGO

abrir ↗

Referência✓ VexDay Proof

Apple QuickTime 7.5.5 / iTunes 8.0 - Remote Off-by-One Crash

CVE-2008-4116—dosmultiple

Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser cr

28RIESGO

abrir ↗

Referência

CVE-2019-12276

CVE-2019-12276—

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows

50RIESGO

abrir ↗

Referência

CVE-2019-9189

CVE-2019-9189—

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when

28RIESGO

abrir ↗

Referência

CVE-2019-19731

CVE-2019-19731—

Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary loc

28RIESGO

abrir ↗

Referência

CVE-2013-3502

CVE-2013-3502—

monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to ex

50RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.