Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
26.041 exploits
Referência
CVE-2026-9523
CVE-2026-9523MEDIUM
Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform getCalcmeterDetailDayListTree sql injection
33RIESGO
abrir ↗
Referência
CVE-2009-3053
CVE-2009-3053—
Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to inclu
38RIESGO
abrir ↗
Referência
CVE-2022-41082
CVE-2022-41082HIGHbajo ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2009-4756
CVE-2009-4756—
Stack-based buffer overflow in TraktorBeatport.exe 1.0.0.283 in Beatport Player 1.0.0.0 allows remote attackers to execu
23RIESGO
abrir ↗
Referência
CVE-2025-59287
CVE-2025-59287CRITICALbajo ataque
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RIESGO
abrir ↗
Referência
CVE-2026-12222
CVE-2026-12222HIGH
Yealink SIP-T46U Web FastCGI Service bttest mod_webd.BlueToothTest stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2013-2068
CVE-2013-2068—
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow re
50RIESGO
abrir ↗
Referência
CVE-2009-3054
CVE-2009-3054—
SQL injection vulnerability in the Artetics.com Art Portal (com_artportal) component 1.0 for Joomla! allows remote attac
23RIESGO
abrir ↗
Referência
CVE-2014-9440
CVE-2014-9440—
SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2025-24813
CVE-2025-24813CRITICALbajo ataque
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RIESGO
abrir ↗
Referência
CVE-2026-85117
CVE-2026-85117MEDIUM
Contact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation
33RIESGO
abrir ↗
Referência
CVE-2013-2754
CVE-2013-2754—
Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hij
23RIESGO
abrir ↗
Referência
CVE-2023-38035
CVE-2023-38035CRITICALbajo ataqueransomware
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an
100RIESGO
abrir ↗
Referência
CVE-2026-86776
CVE-2026-86776MEDIUM
KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size
33RIESGO
abrir ↗
Referência✓ VexDay Proof
TuMusika Evolution 1.7R5 - Remote File Disclosure
CVE-2007-6188—webappsphp
Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Mambo Component Recipes 1.00 - 'id' SQL Injection
CVE-2008-0518—webappsphp
SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
EPShop < 3.0 - 'pid' SQL Injection
CVE-2008-3412—webappsphp
SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Soulseek 157 NS x/156.x - Remote Distributed Search Code Execution
CVE-2009-1830—doswindows
Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long sear
23RIESGO
abrir ↗
Referência
CVE-2013-2945
CVE-2013-2945—
SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators to
23RIESGO
abrir ↗
Referência
CVE-2014-6332
CVE-2014-6332HIGHbajo ataque
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
100RIESGO
abrir ↗
Referência✓ VexDay Proof
Xerox Phaser 8400 - Remote Reboot (Denial of Service)
CVE-2008-3571—doshardware
The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900
35RIESGO
abrir ↗
Referência
CVE-2014-9641
CVE-2014-9641—
The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows lo
23RIESGO
abrir ↗
Referência
CVE-2020-10189
CVE-2020-10189CRITICALbajo ataque
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted d
100RIESGO
abrir ↗
Referência
CVE-2013-7409
CVE-2013-7409—
Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possib
50RIESGO
abrir ↗
Referência
CVE-2021-3129
CVE-2021-3129CRITICALbajo ataqueransomware
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RIESGO
abrir ↗
Referência
CVE-2021-3129
CVE-2021-3129CRITICALbajo ataqueransomware
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RIESGO
abrir ↗
Referência
CVE-2026-41453
CVE-2026-41453HIGH
Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameter
41RIESGO
abrir ↗
Referência
CVE-2026-86674
CVE-2026-86674MEDIUM
ningzichun Student Management System login.php session_start session fixiation
33RIESGO
abrir ↗
Referência
CVE-2011-4831
CVE-2011-4831—
Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SquirrelMail G/PGP Encryption Plugin 2.0 - Command Execution
CVE-2005-1924—webappsphp
The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands v
28RIESGO
abrir ↗
← anteriorpágina 204 / 869siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.