Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.001exploits catalogados

40.084CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 25.989Exploit-DB 24.488GitHub PoC 17.519VulnCheck XDB 9945Nuclei 4531Metasploit 3529✓ solo verificadosrecientes populares riesgo

25.989 exploits

Referência

CVE-2015-2055

CVE-2015-2055—

Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the

23RIESGO

Referência

CVE-2014-3804

CVE-2014-3804—

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a

60RIESGO

Referência

CVE-2017-11321

CVE-2017-11321—

The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admi

23RIESGO

Referência

CVE-2017-5798

CVE-2017-5798—

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP ve

23RIESGO

Referência

CVE-2019-6282

CVE-2019-6282—

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpag

23RIESGO

Referência

CVE-2020-35437

CVE-2020-35437—

Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the

23RIESGO

Referência

CVE-2021-43857

CVE-2021-43857CRITICAL

Gerapy may contain remote code execution vulnerability

60RIESGO

Referência

CVE-2010-20121

CVE-2010-20121CRITICAL

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

63RIESGO

Referência

CVE-2010-20121

CVE-2010-20121CRITICAL

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

63RIESGO

Referência

CVE-2010-20121

CVE-2010-20121CRITICAL

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

63RIESGO

Referência

CVE-2010-20121

CVE-2010-20121CRITICAL

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

63RIESGO

Referência

CVE-2010-20121

CVE-2010-20121CRITICAL

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

63RIESGO

Referência

CVE-2010-20121

CVE-2010-20121CRITICAL

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

63RIESGO

Referência

CVE-2010-20121

CVE-2010-20121CRITICAL

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

63RIESGO

Referência

CVE-2026-109987

CVE-2026-109987HIGH

PixelYourSite (Free & Pro) - Unauthenticated Stored XSS via Cookie

41RIESGO

Referência

CVE-2023-53963

CVE-2023-53963CRITICAL

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection

48RIESGO

Referência

CVE-2022-50944

CVE-2022-50944HIGH

Aero CMS 0.0.1 PHP Code Injection via posts.php

41RIESGO

Referência

CVE-2013-3961

CVE-2013-3961—

SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to exe

23RIESGO

Referência✓ VexDay Proof

SunShop Shopping Cart 3.5 - 'abs_path' Remote File Inclusion

CVE-2007-2070—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote

23RIESGO

Referência✓ VexDay Proof

phpBB Mod Ktauber.com StylesDemo - Blind SQL Injection

CVE-2007-4984—webappsphp

SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to e

23RIESGO

Referência

CVE-2016-8018

CVE-2016-8018—

Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)

23RIESGO

Referência

CVE-2017-8927

CVE-2017-8927—

Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified

23RIESGO

Referência

CVE-2020-26808

CVE-2020-26808CRITICAL

SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 a

48RIESGO

Referência

CVE-2018-17996

CVE-2018-17996—

LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_

23RIESGO

Referência

CVE-2018-4241

CVE-2018-4241—

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

23RIESGO

Referência✓ VexDay Proof

FlexCMS Calendar - 'itemID' Blind SQL Injection

CVE-2009-1256—webappsphp

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId para

23RIESGO

Referência✓ VexDay Proof

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

CVE-2009-2182—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP

23RIESGO

Referência

CVE-2009-4251

CVE-2009-4251—

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers

23RIESGO

Referência

CVE-2010-5025

CVE-2010-5025—

Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to i

23RIESGO

Referência

CVE-2018-17996

CVE-2018-17996—

LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_

23RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.