Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.001exploits catalogados
40.084CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.989Exploit-DB 24.488GitHub PoC 17.519VulnCheck XDB 9945Nuclei 4531Metasploit 3529✓ solo verificadosrecientespopularesriesgo
25.989 exploits
Referência✓ VexDay Proof
ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion
CVE-2007-1010—webappsphp
Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote att
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Absolute Poll Manager XE 4.1 - Insecure Cookie Handling
CVE-2008-6860—webappsphp
Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative acc
23RIESGO
abrir ↗
Referência
CVE-2010-0459
CVE-2010-0459—
SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! al
23RIESGO
abrir ↗
Referência
CVE-2016-1252
CVE-2016-1252—
The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1
23RIESGO
abrir ↗
Referência
CVE-2009-2362
CVE-2009-2362—
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VMware 'IntraProcessLogging.dll' 5.5.3.42958 - Arbitrary Data Write
CVE-2007-4059—remotewindows
Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware
23RIESGO
abrir ↗
Referência
CVE-2014-9350
CVE-2014-9350—
TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2009-4423
CVE-2009-4423—
SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2017-6359
CVE-2017-6359—
QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands vi
28RIESGO
abrir ↗
Referência
CVE-2026-82964
CVE-2026-82964HIGH
Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys
41RIESGO
abrir ↗
Referência
CVE-2014-3418
CVE-2014-3418—
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via she
23RIESGO
abrir ↗
Referência
CVE-2014-9350
CVE-2014-9350—
TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2016-15048
CVE-2016-15048CRITICAL
AMTT HiBOS Command Injection RCE via server_ping.php
48RIESGO
abrir ↗
Referência
CVE-2010-4055
CVE-2010-4055—
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denia
23RIESGO
abrir ↗
Referência
CVE-2015-5533
CVE-2015-5533—
SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote
23RIESGO
abrir ↗
Referência
CVE-2023-34096
CVE-2023-34096MEDIUM
Thruk has Path Traversal Vulnerability in panorama.pm
45RIESGO
abrir ↗
Referência✓ VexDay Proof
SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow
CVE-2008-6898—remotewindows
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote
50RIESGO
abrir ↗
Referência
CVE-2011-3192
CVE-2011-3192—
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attac
60RIESGO
abrir ↗
Referência
CVE-2015-5533
CVE-2015-5533—
SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote
23RIESGO
abrir ↗
Referência
CVE-2021-21276
CVE-2021-21276CRITICAL
Privilege escalation in Polr
48RIESGO
abrir ↗
Referência
CVE-2026-110191
CVE-2026-110191LOW
Product Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX Actions
28RIESGO
abrir ↗
Referência
CVE-2026-110179
CVE-2026-110179MEDIUM
affiliate-toolkit < 3.8.9 - Editor+ SQL Injection via orderby Parameter
33RIESGO
abrir ↗
Referência
CVE-2010-2459
CVE-2010-2459—
SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2010-4057
CVE-2010-4057—
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon recei
23RIESGO
abrir ↗
Referência
CVE-2009-3356
CVE-2009-3356—
SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2009-4432
CVE-2009-4432—
SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WengoPhone 2.x - SIP Phone Remote Denial of Service
CVE-2007-4366—doswindows
WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Co
23RIESGO
abrir ↗
Referência
CVE-2016-1001
CVE-2016-1001—
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows an
28RIESGO
abrir ↗
Referência
CVE-2026-19073
CVE-2026-19073MEDIUM
Order Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Customer Order Data Disclosure
33RIESGO
abrir ↗
Referência
CVE-2024-14044
CVE-2024-14044MEDIUM
Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow
33RIESGO
abrir ↗
← anteriorpágina 172 / 867siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.