Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.186exploits catalogados
40.156CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientespopularesriesgo
26.041 exploits
Referência
CVE-2026-11534
CVE-2026-11534MEDIUM
imvks786 student_management_system add.php cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2014-2630
CVE-2014-2630—
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via u
38RIESGO
abrir ↗
Referência
CVE-2026-25559
CVE-2026-25559HIGH
OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint
41RIESGO
abrir ↗
Referência✓ VexDay Proof
phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection
CVE-2009-2179—webappsphp
SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2026-25855
CVE-2026-25855HIGH
OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Simple Machines Forum (SMF) 1.1.3 - Blind SQL Injection
CVE-2007-5646—webappsphp
SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows rem
23RIESGO
abrir ↗
Referência
CVE-2011-1249
CVE-2011-1249—
The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis
23RIESGO
abrir ↗
Referência
CVE-2012-2110
CVE-2012-2110—
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before
35RIESGO
abrir ↗
Referência
CVE-2012-2227
CVE-2012-2227—
Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and exec
23RIESGO
abrir ↗
Referência
CVE-2012-2234
CVE-2012-2234—
Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticat
23RIESGO
abrir ↗
Referência✓ VexDay Proof
JW Player - 'playerready' Cross-Site Scripting
CVE-2012-3351—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers
23RIESGO
abrir ↗
Referência
CVE-2014-3081
CVE-2014-3081—
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote aut
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpMyNewsletter 0.8b5 - 'msg_id' SQL Injection
CVE-2008-1295—webappsphp
SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earli
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Nero ShowTime 5.0.15.0 - '.m3u' Playlist File Remote Buffer Overflow (PoC)
CVE-2008-7079—doswindows
Buffer overflow in Nero ShowTime 5.0.15.0 allows remote attackers to cause a denial of service (crash) and possibly exec
23RIESGO
abrir ↗
Referência
CVE-2011-1556
CVE-2011-1556—
SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote a
23RIESGO
abrir ↗
Referência
CVE-2026-82914
CVE-2026-82914MEDIUM
kishan0725 Hospital-Management-System search.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2012-2592
CVE-2012-2592—
Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Referência
CVE-2012-2593
CVE-2012-2593—
Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2014-2994
CVE-2014-2994—
Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to exec
28RIESGO
abrir ↗
Referência
CVE-2014-2994
CVE-2014-2994—
Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to exec
28RIESGO
abrir ↗
Referência
CVE-2011-1565
CVE-2011-1565—
Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphica
50RIESGO
abrir ↗
Referência
CVE-2009-4604
CVE-2009-4604—
PHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto (com_mamboleto) component 2.0
23RIESGO
abrir ↗
Referência
CVE-2026-86295
CVE-2026-86295MEDIUM
D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection
33RIESGO
abrir ↗
Referência
CVE-2014-3878
CVE-2014-3878—
Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4,
23RIESGO
abrir ↗
Referência
CVE-2014-5258
CVE-2014-5258—
Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated
43RIESGO
abrir ↗
Referência
CVE-2026-86291
CVE-2026-86291MEDIUM
itsourcecode Sales and Inventory System us_edit1.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-79615
CVE-2026-79615LOW
Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR
28RIESGO
abrir ↗
Referência
CVE-2009-2255
CVE-2009-2255—
Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which a
35RIESGO
abrir ↗
Referência
CVE-2026-19423
CVE-2026-19423HIGH
Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms
41RIESGO
abrir ↗
Referência
CVE-2026-19084
CVE-2026-19084HIGH
Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read
41RIESGO
abrir ↗
← anteriorpágina 205 / 869siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.