Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

85.883exploits catalogados

40.037CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.956Exploit-DB 24.488GitHub PoC 17.453VulnCheck XDB 9931Nuclei 4527Metasploit 3528✓ solo verificadosrecientes populares riesgo

25.956 exploits

Referência

CVE-2010-5227

CVE-2010-5227—

Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmap

23RIESGO

abrir ↗

Referência

CVE-2026-17457

CVE-2026-17457MEDIUM

mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure

33RIESGO

abrir ↗

Referência

CVE-2020-8615

CVE-2020-8615—

A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves a

43RIESGO

abrir ↗

Referência

CVE-2015-20124

CVE-2015-20124HIGH

Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php

41RIESGO

abrir ↗

Referência

CVE-2015-20123

CVE-2015-20123HIGH

Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php

41RIESGO

abrir ↗

Referência

CVE-2015-20123

CVE-2015-20123HIGH

Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php

41RIESGO

abrir ↗

Referência

CVE-2014-125134

CVE-2014-125134HIGH

ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.php

41RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPMyCMS 0.3 - 'basic.inc.php' Remote File Inclusion

CVE-2006-6612—webappsphp

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PH

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JContentSubscription 1.5.8 - Multiple Remote File Inclusions

CVE-2007-5407—webappsphp

Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla! all

35RIESGO

abrir ↗

Referência

CVE-2026-14658

CVE-2026-14658MEDIUM

code-projects Assessment Management marking-scheme.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2014-4643

CVE-2014-4643—

Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a den

23RIESGO

abrir ↗

Referência

CVE-2026-14657

CVE-2026-14657MEDIUM

code-projects Assessment Management Database Query marking-scheme.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2017-15271

CVE-2017-15271—

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be

23RIESGO

abrir ↗

Referência

CVE-2023-27372

CVE-2023-27372CRITICAL

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

85RIESGO

abrir ↗

Referência

CVE-2018-10751

CVE-2018-10751—

A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Ex

23RIESGO

abrir ↗

Referência

CVE-2026-14656

CVE-2026-14656MEDIUM

code-projects Assessment Management remove-user.php cross site scripting

33RIESGO

abrir ↗

Referência

CVE-2018-18759

CVE-2018-18759—

Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.

23RIESGO

abrir ↗

Referência

CVE-2020-8655

CVE-2020-8655HIGHbajo ataque

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

98RIESGO

abrir ↗

Referência

CVE-2014-0372

CVE-2014-0372—

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0

23RIESGO

abrir ↗

Referência

CVE-2020-8655

CVE-2020-8655HIGHbajo ataque

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability

98RIESGO

abrir ↗

Referência

CVE-2026-108916

CVE-2026-108916MEDIUM

Edimax BR-6208AC formAccept command injection

33RIESGO

abrir ↗

Referência

CVE-2009-3115

CVE-2009-3115—

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a c

28RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component eWriting 1.2.1 - 'cat' SQL Injection

CVE-2008-1297—webappsphp

SQL injection vulnerability in index.php in the eWriting (com_ewriting) 1.2.1 module for Mambo and Joomla! allows remote

23RIESGO

abrir ↗

Referência

CVE-2026-109186

CVE-2026-109186HIGH

jshERP through 3.6 Mass Assignment via PUT /user/update

41RIESGO

abrir ↗

Referência

CVE-2018-10751

CVE-2018-10751—

A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Ex

23RIESGO

abrir ↗

Referência

CVE-2018-18759

CVE-2018-18759—

Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.

23RIESGO

abrir ↗

Referência

CVE-2011-0403

CVE-2011-0403—

Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, a

23RIESGO

abrir ↗

Referência

CVE-2018-4200

CVE-2018-4200—

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud

23RIESGO

abrir ↗

Referência

CVE-2017-15271

CVE-2017-15271—

A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be

23RIESGO

abrir ↗

Referência

CVE-2019-10969

CVE-2019-10969—

Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthor

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.