Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados
40.037CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientespopularesriesgo
25.956 exploits
Referência
CVE-2021-22204
CVE-2021-22204MEDIUMbajo ataque
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RIESGO
abrir ↗
Referência
CVE-2023-5204
CVE-2023-5204CRITICAL
AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response
63RIESGO
abrir ↗
Referência
CVE-2009-0812
CVE-2009-0812—
Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions all
23RIESGO
abrir ↗
Referência
CVE-2018-6064
CVE-2018-6064—
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote
23RIESGO
abrir ↗
Referência
CVE-2009-3194
CVE-2009-3194—
Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject ar
23RIESGO
abrir ↗
Referência
CVE-2010-2848
CVE-2010-2848—
Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor
23RIESGO
abrir ↗
Referência
CVE-2009-3812
CVE-2009-3812—
Heap-based buffer overflow in OtsAV DJ trial version 1.85.64.0, Radio trial version 1.85.64.0, TV trial version 1.85.64.
23RIESGO
abrir ↗
Referência
CVE-2010-4978
CVE-2010-4978—
Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Referência
CVE-2009-4615
CVE-2009-4615—
SQL injection vulnerability in review.php in MYRE Holiday Rental Manager allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2013-4093
CVE-2013-4093—
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to o
23RIESGO
abrir ↗
Referência
CVE-2011-4453
CVE-2011-4453—
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RIESGO
abrir ↗
Referência
CVE-2010-2848
CVE-2010-2848—
Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artfor
23RIESGO
abrir ↗
Referência
CVE-2010-2932
CVE-2010-2932—
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-2932
CVE-2010-2932—
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2021-22204
CVE-2021-22204MEDIUMbajo ataque
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exec
100RIESGO
abrir ↗
Referência
CVE-2026-85513
CVE-2026-85513MEDIUM
StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management
33RIESGO
abrir ↗
Referência✓ VexDay Proof
IMGallery 2.5 - Create Uploader Script
CVE-2007-0082—webappsphp
users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows
23RIESGO
abrir ↗
Referência
CVE-2026-11434
CVE-2026-11434MEDIUM
FluentCMS Blocks Plugin blocks cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2025-34102
CVE-2025-34102CRITICAL
CryptoLog Unauthenticated RCE via SQL Injection and Command Injection
63RIESGO
abrir ↗
Referência
CVE-2025-34102
CVE-2025-34102CRITICAL
CryptoLog Unauthenticated RCE via SQL Injection and Command Injection
63RIESGO
abrir ↗
Referência
CVE-2025-34102
CVE-2025-34102CRITICAL
CryptoLog Unauthenticated RCE via SQL Injection and Command Injection
63RIESGO
abrir ↗
Referência
CVE-2014-6308
CVE-2014-6308—
Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (dot
43RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Photo Gallery 1.0 - 'photo_id' SQL Injection
CVE-2008-1875—webappsphp
SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote
23RIESGO
abrir ↗
Referência
CVE-2015-4040
CVE-2015-4040—
Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 t
23RIESGO
abrir ↗
Referência
CVE-2010-2329
CVE-2010-2329—
Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist en
23RIESGO
abrir ↗
Referência
CVE-2012-4334
CVE-2012-4334—
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v
23RIESGO
abrir ↗
Referência
CVE-2014-8657
CVE-2014-8657—
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows r
23RIESGO
abrir ↗
Referência
CVE-2016-7387
CVE-2016-7387—
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RIESGO
abrir ↗
Referência
CVE-2016-7644
CVE-2016-7644—
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO
23RIESGO
abrir ↗
Referência
CVE-2017-2454
CVE-2017-2454—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
← anteriorpágina 155 / 866siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.