Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.001exploits catalogados
40.084CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.989Exploit-DB 24.488GitHub PoC 17.519VulnCheck XDB 9945Nuclei 4531Metasploit 3529✓ solo verificadosrecientespopularesriesgo
25.989 exploits
Referência
CVE-2014-4034
CVE-2014-4034—
SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Docebo 3.5.0.3 - 'lib.regset.php' Command Execution
CVE-2008-7153—webappsphp
SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earl
23RIESGO
abrir ↗
Referência
CVE-2009-4451
CVE-2009-4451—
Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary co
23RIESGO
abrir ↗
Referência
CVE-2015-1480
CVE-2015-1480—
ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive tic
23RIESGO
abrir ↗
Referência
CVE-2015-2824
CVE-2015-2824—
Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attacke
23RIESGO
abrir ↗
Referência
CVE-2009-4819
CVE-2009-4819—
Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2015-2824
CVE-2015-2824—
Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attacke
23RIESGO
abrir ↗
Referência
CVE-2009-4870
CVE-2009-4870—
Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2009-2334
CVE-2009-2334—
wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access t
23RIESGO
abrir ↗
Referência
CVE-2023-4173
CVE-2023-4173LOW
mooSocial mooStore index cross site scripting
43RIESGO
abrir ↗
Referência
CVE-2026-108970
CVE-2026-108970MEDIUM
itsmeravitejak Online-Examination-System Registration Form database.php addNewUser sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-108969
CVE-2026-108969MEDIUM
itsmeravitejak Online-Examination-System Session session.php checkLogin comparison
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Apache 2.2.14 mod_isapi - Dangling Pointer Remote SYSTEM
CVE-2010-0425—remotewindows
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2
60RIESGO
abrir ↗
Referência
CVE-2009-3515
CVE-2009-3515—
Directory traversal vulnerability in dnet_admin/index.php in d.net CMS allows remote authenticated administrators to inc
23RIESGO
abrir ↗
Referência
CVE-2010-1353
CVE-2010-1353—
Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to re
43RIESGO
abrir ↗
Referência
CVE-2010-3742
CVE-2010-3742—
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attac
23RIESGO
abrir ↗
Referência
CVE-2010-5028
CVE-2010-5028—
SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to e
38RIESGO
abrir ↗
Referência
CVE-2015-1480
CVE-2015-1480—
ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive tic
23RIESGO
abrir ↗
Referência✓ VexDay Proof
JGBBS 3.0beta1 - 'search.asp?author' SQL Injection
CVE-2007-1440—webappsasp
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2015-1674
CVE-2015-1674—
The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not pr
23RIESGO
abrir ↗
Referência
CVE-2017-15359
CVE-2017-15359—
In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory t
23RIESGO
abrir ↗
Referência
CVE-2017-2367
CVE-2017-2367—
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RIESGO
abrir ↗
Referência
CVE-2017-9259
CVE-2017-9259—
The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2026-6142
CVE-2026-6142MEDIUM
tushar-2223 Hotel Management System roomdelete.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
DivX Player 6.4.1 - DivXBrowserPlugin 'npdivx32.dll' IE Denial of Service
CVE-2007-0429—doswindows
DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2022-4047
CVE-2022-4047CRITICAL
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
48RIESGO
abrir ↗
Referência
CVE-2010-5194
CVE-2010-5194—
Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx)
23RIESGO
abrir ↗
Referência
CVE-2009-4889
CVE-2009-4889—
SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2012-1673
CVE-2012-1673—
SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2017-11831
CVE-2017-11831—
Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2,
23RIESGO
abrir ↗
← anteriorpágina 174 / 867siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.