Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.062exploits catalogados
31.617CVEs con explotación pública
0probados en laboratorio
TodosExploit-DB 22.467Referência 19.791GitHub PoC 13.086VulnCheck XDB 8069Nuclei 4187Metasploit 3462✓ solo verificadosrecientespopularesriesgo
19.791 exploits
Referência
CVE-2018-1002105
CVE-2018-1002105CRITICAL
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg
70RIESGO
abrir ↗
Referência
CVE-2018-9276
CVE-2018-9276HIGHbajo ataque
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra
100RIESGO
abrir ↗
Referência
CVE-2018-9276
CVE-2018-9276HIGHbajo ataque
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra
100RIESGO
abrir ↗
Referência
CVE-2018-9276
CVE-2018-9276HIGHbajo ataque
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra
100RIESGO
abrir ↗
Referência
Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow
CVE-2008-4193—
Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t
60RIESGO
abrir ↗
Referência
CVE-2010-1743
CVE-2010-1743—
SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Referência
CVE-2016-6603
CVE-2016-6603—
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users v
45RIESGO
abrir ↗
Referência
CVE-2016-6603
CVE-2016-6603—
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users v
45RIESGO
abrir ↗
Referência
CVE-2021-24762
CVE-2021-24762—
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
60RIESGO
abrir ↗
Referência
CVE-2020-0674
CVE-2020-0674HIGHbajo ataque
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
93RIESGO
abrir ↗
Referência
CVE-2020-0674
CVE-2020-0674HIGHbajo ataque
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
93RIESGO
abrir ↗
Referência
CVE-2020-0674
CVE-2020-0674HIGHbajo ataque
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
93RIESGO
abrir ↗
Referência
CVE-2015-8103
CVE-2015-8103—
The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co
60RIESGO
abrir ↗
Referência
CVE-2015-8103
CVE-2015-8103—
The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co
60RIESGO
abrir ↗
Referência
CVE-2018-1160
CVE-2018-1160CRITICAL
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RIESGO
abrir ↗
Referência
CVE-2018-1160
CVE-2018-1160CRITICAL
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RIESGO
abrir ↗
Referência
CVE-2018-1160
CVE-2018-1160CRITICAL
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RIESGO
abrir ↗
Referência
CVE-2018-1160
CVE-2018-1160CRITICAL
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RIESGO
abrir ↗
Referência
CVE-2020-13151
CVE-2020-13151—
Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)
60RIESGO
abrir ↗
Referência
CVE-2020-13151
CVE-2020-13151—
Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)
60RIESGO
abrir ↗
Referência
CVE-2017-5816
CVE-2017-5816—
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
60RIESGO
abrir ↗
Referência
CVE-2017-5816
CVE-2017-5816—
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
60RIESGO
abrir ↗
Referência
CVE-2021-32305
CVE-2021-32305—
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet
60RIESGO
abrir ↗
Referência
CVE-2015-2426
CVE-2015-2426HIGHbajo ataque
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2
100RIESGO
abrir ↗
Referência
CVE-2020-8644
CVE-2020-8644CRITICALbajo ataque
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
100RIESGO
abrir ↗
Referência
CVE-2018-10661
CVE-2018-10661—
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
60RIESGO
abrir ↗
Referência
CVE-2026-7113
CVE-2026-7113MEDIUM
NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-7112
CVE-2026-7112MEDIUM
NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication
33RIESGO
abrir ↗
Referência
CVE-2026-7110
CVE-2026-7110MEDIUM
code-projects Invoice System in Laravel item cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2026-7109
CVE-2026-7109MEDIUM
code-projects Invoice System in Laravel API Endpoint item improper authorization
33RIESGO
abrir ↗
← anteriorpágina 19 / 660siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.