Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados
39.383CVEs con explotación pública
24.695probados en laboratorio
TodosReferência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientespopularesriesgo
25.447 exploits
Referência
CVE-2010-2613
CVE-2010-2613—
Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remo
23RIESGO
abrir ↗
Referência
CVE-2010-2656
CVE-2010-2656—
The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before
23RIESGO
abrir ↗
Referência
CVE-2026-7218
CVE-2026-7218HIGH
Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow
41RIESGO
abrir ↗
Referência✓ VexDay Proof
JETIK-WEB Software - 'kat' SQL Injection
CVE-2008-6401—webappsphp
SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Article Directory - 'index.php' Remote File Inclusion
CVE-2007-4007—webappsphp
PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)
CVE-2008-7103—doswindows
Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
glFusion 1.1.2 - 'COM_applyFilter()/cookies' Blind SQL Injection
CVE-2009-1282—webappsphp
SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to e
23RIESGO
abrir ↗
Referência✓ VexDay Proof
GuestCal 2.1 - 'index.php?lang' Local File Inclusion
CVE-2009-1319—webappsphp
Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute
23RIESGO
abrir ↗
Referência
CVE-2010-2687
CVE-2010-2687—
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2010-2688
CVE-2010-2688—
SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2010-2715
CVE-2010-2715—
Cross-site scripting (XSS) vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Entertainment CMS - Local File Inclusion / Remote Command Execution
CVE-2007-4008—webappsphp
Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include an
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YourFreeWorld Downline Builder - 'tr.php' SQL Injection
CVE-2008-4895—webappsphp
SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebFileExplorer 3.1 - Authentication Bypass
CVE-2009-1323—webappsphp
SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ASX to MP3 Converter 3.0.0.7 - '.m3u' Universal Stack Overflow
CVE-2009-1324—localwindows
Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary cod
28RIESGO
abrir ↗
Referência
CVE-2022-33891
CVE-2022-33891HIGHbajo ataque
Apache Spark shell command injection vulnerability via Spark UI
100RIESGO
abrir ↗
Referência
CVE-2010-2907
CVE-2010-2907—
SQL injection vulnerability in the Huru Helpdesk (com_huruhelpdesk) component for Joomla! allows remote attackers to exe
23RIESGO
abrir ↗
Referência
CVE-2012-0937
CVE-2012-0937—
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQ
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Nessus Vulnerability Scanner 3.0.6 - ActiveX Remote Delete File
CVE-2007-4031—remotewindows
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
DjVu - ActiveX Control 3.0 ImageURL Property Overflow
CVE-2008-4922—remotewindows
Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers
50RIESGO
abrir ↗
Referência✓ VexDay Proof
MW6 Aztec - ActiveX 'Aztec.dll' Remote Insecure Method
CVE-2008-4923—remotewindows
Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.
23RIESGO
abrir ↗
Referência
CVE-2023-41892
CVE-2023-41892CRITICAL
Craft CMS Remote Code Execution vulnerability
85RIESGO
abrir ↗
Referência✓ VexDay Proof
MW6 Barcode - ActiveX 'Barcode.dll' Remote Heap Overflow (PoC)
CVE-2009-0298—doswindows
Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)
CVE-2009-1325—doswindows
Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long U
23RIESGO
abrir ↗
Referência
CVE-2010-3127
CVE-2010-3127—
Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers
28RIESGO
abrir ↗
Referência✓ VexDay Proof
SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection
CVE-2007-4055—webappsasp
SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2012-1009
CVE-2012-1009—
NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of s
23RIESGO
abrir ↗
Referência✓ VexDay Proof
rdesktop 1.5.0 - 'process_redirect_pdu()' BSS Overflow (PoC)
CVE-2008-1802—doslinux
Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitr
28RIESGO
abrir ↗
Referência
CVE-2012-1058
CVE-2012-1058—
Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Feedback and Rating Script 1.0 - 'detail.php' SQL Injection
CVE-2008-2277—webappsphp
SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
← anteriorpágina 17 / 849siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.