Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.001exploits catalogados
40.084CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.989Exploit-DB 24.488GitHub PoC 17.519VulnCheck XDB 9945Nuclei 4531Metasploit 3529✓ solo verificadosrecientespopularesriesgo
25.989 exploits
Referência
CVE-2016-1767
CVE-2016-1767—
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m
23RIESGO
abrir ↗
Referência
CVE-2017-13797
CVE-2017-13797—
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud
23RIESGO
abrir ↗
Referência
CVE-2026-78394
CVE-2026-78394MEDIUM
Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Snircd 1.3.4 - 'send_user_mode' Denial of Service
CVE-2008-1501—dosmultiple
The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and u
23RIESGO
abrir ↗
Referência
CVE-2026-96764
CVE-2026-96764MEDIUM
kvcache-ai mooncake Regular Expression GetReplicaListByRegex allocation of resources
33RIESGO
abrir ↗
Referência
CVE-2010-4791
CVE-2010-4791—
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user
23RIESGO
abrir ↗
Referência
CVE-2009-4581
CVE-2009-4581—
Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is dis
23RIESGO
abrir ↗
Referência
CVE-2010-0701
CVE-2010-0701—
SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência
CVE-2026-18612
CVE-2026-18612CRITICAL
GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection
48RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component EasyBook 1.1 - 'gbid' SQL Injection
CVE-2008-2569—webappsphp
SQL injection vulnerability in the EasyBook (com_easybook) component 1.1 for Joomla! allows remote attackers to execute
23RIESGO
abrir ↗
Referência
CVE-2026-77939
CVE-2026-77939HIGH
Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint
41RIESGO
abrir ↗
Referência
CVE-2017-14507
CVE-2017-14507—
Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to exec
23RIESGO
abrir ↗
Referência
CVE-2010-1877
CVE-2010-1877—
SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to exec
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Microsoft Internet Explorer 7 - Clickjacking
CVE-2009-0369—remotewindows
Microsoft Internet Explorer 7 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick acti
28RIESGO
abrir ↗
Referência
CVE-2009-3659
CVE-2009-3659—
SQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Htaccess Passwort Generator 1.1 - 'ht_pfad' Remote File Inclusion
CVE-2007-1013—webappsphp
PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote a
23RIESGO
abrir ↗
Referência
CVE-2010-0702
CVE-2010-0702—
SQL injection vulnerability in cisco/services/PhonecDirectory.php in Fonality Trixbox 2.2.4 allows remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2016-1769
CVE-2016-1769—
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m
23RIESGO
abrir ↗
Referência
CVE-2026-79804
CVE-2026-79804MEDIUM
SililaWijesinghe Food Ordering System search.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2023-34581
CVE-2023-34581—
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/
23RIESGO
abrir ↗
Referência
CVE-2026-18365
CVE-2026-18365MEDIUM
Zportals < 6.4.2 - Subscriber+ User Email Disclosure
33RIESGO
abrir ↗
Referência
CVE-2014-8380
CVE-2014-8380—
Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗
Referência
CVE-2015-1575
CVE-2015-1575—
Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2023-4666
CVE-2023-4666CRITICAL
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
63RIESGO
abrir ↗
Referência✓ VexDay Proof
mebiblio 0.4.7 - SQL Injection / Arbitrary File Upload / Cross-Site Scripting
CVE-2008-2648—webappsphp
Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2014-4035
CVE-2014-4035—
Cross-site scripting (XSS) vulnerability in booking_details.php in Best Soft Inc. (BSI) Advance Hotel Booking System 2.0
23RIESGO
abrir ↗
Referência
CVE-2014-8380
CVE-2014-8380—
Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web script or HTML
23RIESGO
abrir ↗
Referência
CVE-2021-42013
CVE-2021-42013CRITICALbajo ataqueransomware
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RIESGO
abrir ↗
Referência✓ VexDay Proof
ezusermanager 1.6 - Remote File Inclusion
CVE-2006-2424—webappsphp
PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when register_globals is enabled, allows remot
23RIESGO
abrir ↗
Referência
CVE-2015-1575
CVE-2015-1575—
Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗
← anteriorpágina 182 / 867siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.