Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

79.230exploits catalogados
36.424CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8860Nuclei 4361Metasploit 3491✓ solo verificadosrecientespopularesriesgo
22.721 exploits
Referência
CVE-2024-12987
CVE-2024-12987MEDIUMbajo ataque
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
100RIESGO
abrir ↗
Referência
CVE-2023-20887
CVE-2023-20887CRITICALbajo ataque
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware
100RIESGO
abrir ↗
Referência
CVE-2026-32834
CVE-2026-32834HIGH
Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning
41RIESGO
abrir ↗
Referência✓ VexDay Proof
XOOPS Module tutorials 2.1b - 'printpage.php' SQL Injection
CVE-2008-1351—webappsphp
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência
CVE-2011-5005
CVE-2011-5005—
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code b
23RIESGO
abrir ↗
Referência
CVE-2026-7744
CVE-2026-7744MEDIUM
CodeAstro Online Classroom addnewstudent sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-9702
CVE-2026-9702HIGH
InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Alt-N MDaemon IMAP server 9.6.4 - 'FETCH' Remote Buffer Overflow
CVE-2008-1358—remotewindows
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to
50RIESGO
abrir ↗
Referência
CVE-2010-1653
CVE-2010-1653—
Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! a
43RIESGO
abrir ↗
Referência✓ VexDay Proof
AuraCMS 2.2.1 - 'X-Forwarded-For' HTTP Header Blind SQL Injection
CVE-2008-1398—webappsphp
SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities
CVE-2008-1402—remotewindows
MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (except
23RIESGO
abrir ↗
Referência
CVE-2016-10045
CVE-2016-10045—
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
60RIESGO
abrir ↗
Referência
CVE-2026-19904
CVE-2026-19904MEDIUM
SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2020-14883
CVE-2020-14883HIGHbajo ataque
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
Referência
CVE-2026-19903
CVE-2026-19903MEDIUM
SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access
33RIESGO
abrir ↗
Referência✓ VexDay Proof
eXV2 Module Viso 2.0.4.3 - 'kid' SQL Injection
CVE-2008-1404—webappsphp
SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attacke
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Fuzzylime CMS 3.01 - 'admindir' Remote File Inclusion
CVE-2008-1405—webappsphp
PHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote attackers to execute a
35RIESGO
abrir ↗
Referência
CVE-2011-5043
CVE-2011-5043—
TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long strin
23RIESGO
abrir ↗
Referência
CVE-2011-5164
CVE-2011-5164—
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute ar
43RIESGO
abrir ↗
Referência✓ VexDay Proof
acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer
CVE-2008-1410—remotewindows
Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows re
23RIESGO
abrir ↗
Referência
CVE-2026-19899
CVE-2026-19899MEDIUM
SourceCodester Class and Exam Timetabling System edit_teacher.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
phpAuction GPL Enhanced 2.51 - Multiple Remote File Inclusions
CVE-2008-1416—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PH
35RIESGO
abrir ↗
Referência
CVE-2023-38831
CVE-2023-38831HIGHbajo ataqueransomware
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir ↗
Referência
CVE-2019-1346
CVE-2019-1346—
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Servi
28RIESGO
abrir ↗
Referência
CVE-2011-5211
CVE-2011-5211—
Cross-site scripting (XSS) vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbit
23RIESGO
abrir ↗
Referência
CVE-2026-7740
CVE-2026-7740MEDIUM
justdan96 tsMuxer vvc.cpp setFPS denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-7739
CVE-2026-7739MEDIUM
justdan96 tsMuxer hevc.cpp setFPS denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-7738
CVE-2026-7738MEDIUM
puchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversal
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Easy-Clanpage 2.2 - 'id' SQL Injection
CVE-2008-1425—webappsphp
SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
KAPhotoservice - 'album.asp' SQL Injection
CVE-2008-1426—webappsasp
SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
← anteriorpágina 2 / 758siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.