Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.001exploits catalogados
40.084CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 25.989Exploit-DB 24.488GitHub PoC 17.519VulnCheck XDB 9945Nuclei 4531Metasploit 3529✓ solo verificadosrecientespopularesriesgo
25.989 exploits
Referência
CVE-2012-4362
CVE-2012-4362—
hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$a
23RIESGO
abrir ↗
Referência
CVE-2013-6233
CVE-2013-6233—
Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2019-1125
CVE-2019-1125MEDIUM
Windows Kernel Information Disclosure Vulnerability
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Distinct TFTP 3.10 - Writable Directory Traversal Execution (Metasploit)
CVE-2012-6664CRITICALwebappswindows
Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remo
68RIESGO
abrir ↗
Referência✓ VexDay Proof
Original 0.11 - 'config.inc.php?x[1]' Remote File Inclusion
CVE-2007-2620—webappsphp
PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote
23RIESGO
abrir ↗
Referência
CVE-2013-6233
CVE-2013-6233—
Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2022-3982
CVE-2022-3982CRITICAL
Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
63RIESGO
abrir ↗
Referência
CVE-2023-31703
CVE-2023-31703CRITICAL
Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allo
48RIESGO
abrir ↗
Referência
CVE-2018-19799
CVE-2018-19799—
Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.
23RIESGO
abrir ↗
Referência
CVE-2012-6534
CVE-2012-6534—
Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/
23RIESGO
abrir ↗
Referência
CVE-2017-5631
CVE-2017-5631—
An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr"
38RIESGO
abrir ↗
Referência
CVE-2014-2045
CVE-2014-2045—
Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 30
23RIESGO
abrir ↗
Referência
CVE-2015-2291
CVE-2015-2291HIGHbajo ataqueransomware
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all
76RIESGO
abrir ↗
Referência
CVE-2019-10849
CVE-2019-10849—
Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.
23RIESGO
abrir ↗
Referência
CVE-2019-7273
CVE-2019-7273—
Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
23RIESGO
abrir ↗
Referência
CVE-2021-30149
CVE-2021-30149—
Composr 10.0.36 allows upload and execution of PHP files.
28RIESGO
abrir ↗
Referência
CVE-2020-1027
CVE-2020-1027HIGHbajo ataque
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Window
71RIESGO
abrir ↗
Referência✓ VexDay Proof
hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities
CVE-2007-6500—webappsasp
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Dyncms Release 6 - 'x_admindir' Remote File Inclusion
CVE-2006-4589—webappsphp
PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allows
23RIESGO
abrir ↗
Referência
CVE-2022-21723
CVE-2022-21723CRITICAL
Out-of-bounds read in multipart parsing in PJSIP
48RIESGO
abrir ↗
Referência
CVE-2009-4823
CVE-2009-4823—
Cross-site scripting (XSS) vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote a
23RIESGO
abrir ↗
Referência
CVE-2010-1528
CVE-2010-1528—
PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows
23RIESGO
abrir ↗
Referência
CVE-2010-4947
CVE-2010-4947—
Cross-site scripting (XSS) vulnerability in advanced_search_result.php in ALLPC 2.5 allows remote attackers to inject ar
23RIESGO
abrir ↗
Referência
CVE-2018-19799
CVE-2018-19799—
Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHPBasket - 'pro_id' SQL Injection
CVE-2008-3713—webappsphp
SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via th
23RIESGO
abrir ↗
Referência
CVE-2026-19085
CVE-2026-19085LOW
Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure
28RIESGO
abrir ↗
Referência
CVE-2026-13173
CVE-2026-13173LOW
Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation
28RIESGO
abrir ↗
Referência✓ VexDay Proof
News Bin Pro 4.32 - Article Grabbing Remote Unicode Buffer Overflow
CVE-2007-1569—doswindows
Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitrar
23RIESGO
abrir ↗
Referência
CVE-2026-19955
CVE-2026-19955MEDIUM
TrailDB TOC Validation tdb.c tdb_open out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-16066
CVE-2026-16066MEDIUM
Welcart e-Commerce < 2.11.34 - Author+ Stored XSS via Product Name
33RIESGO
abrir ↗
← anteriorpágina 183 / 867siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.