Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.186exploits catalogados

40.156CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9976Nuclei 4542Metasploit 3530✓ solo verificadosrecientes populares riesgo

26.041 exploits

Referência✓ VexDay Proof

Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload

CVE-2009-1609—webappsphp

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute ar

23RIESGO

abrir ↗

Referência

CVE-2009-4576

CVE-2009-4576—

SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2009-4576

CVE-2009-4576—

SQL injection vulnerability in the BeeHeard (com_beeheard) component 1.x for Joomla! allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2010-2679

CVE-2010-2679—

SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbit

23RIESGO

abrir ↗

Referência

CVE-2010-3024

CVE-2010-3024—

Multiple cross-site request forgery (CSRF) vulnerabilities in user/main/update_user in DiamondList 0.1.6, and possibly e

23RIESGO

abrir ↗

Referência

CVE-2010-4268

CVE-2010-4268—

SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attac

23RIESGO

abrir ↗

Referência

CVE-2010-4268

CVE-2010-4268—

SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attac

23RIESGO

abrir ↗

Referência

CVE-2017-5671

CVE-2017-5671—

Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x befo

23RIESGO

abrir ↗

Referência

CVE-2009-4598

CVE-2009-4598—

SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbi

23RIESGO

abrir ↗

Referência

CVE-2026-86239

CVE-2026-86239MEDIUM

liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-82553

CVE-2026-82553MEDIUM

sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorization

33RIESGO

abrir ↗

Referência✓ VexDay Proof

FoT Video scripti 1.1b - 'oyun' SQL Injection

CVE-2008-4176—webappsasp

SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência

CVE-2017-14489

CVE-2017-14489—

The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to

23RIESGO

abrir ↗

Referência

CVE-2025-6763

CVE-2025-6763CRITICAL

Comet System H3531 Web-based Management setupA.cfg missing authentication

48RIESGO

abrir ↗

Referência

CVE-2026-28515

CVE-2026-28515CRITICAL

openDCIM <= 23.04 Missing Authorization in install.php

63RIESGO

abrir ↗

Referência

CVE-2026-28515

CVE-2026-28515CRITICAL

openDCIM <= 23.04 Missing Authorization in install.php

63RIESGO

abrir ↗

Referência

CVE-2024-11605

CVE-2024-11605MEDIUM

WP Publications <= 1.2 - Admin+ Stored XSS

33RIESGO

abrir ↗

Referência

CVE-2026-16540

CVE-2026-16540HIGH

Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint

41RIESGO

abrir ↗

Referência

CVE-2026-82473

CVE-2026-82473HIGH

KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints

41RIESGO

abrir ↗

Referência✓ VexDay Proof

Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities

CVE-2009-1671—doswindows

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Env

28RIESGO

abrir ↗

Referência✓ VexDay Proof

32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)

CVE-2009-1675—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

43RIESGO

abrir ↗

Referência

CVE-2009-3509

CVE-2009-3509—

Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2009-4620

CVE-2009-4620—

SQL injection vulnerability in the Joomloc (com_joomloc) component 1.0 for Joomla allows remote attackers to execute arb

23RIESGO

abrir ↗

Referência

CVE-2016-0891

CVE-2016-0891—

Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remo

23RIESGO

abrir ↗

Referência

CVE-2016-0952

CVE-2016-0952—

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec

28RIESGO

abrir ↗

Referência

CVE-2026-16600

CVE-2026-16600HIGH

SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_image

41RIESGO

abrir ↗

Referência

CVE-2026-19998

CVE-2026-19998MEDIUM

code-projects Online Shopping System offersmail.php cross site scripting

33RIESGO

abrir ↗

Referência★ 4

Security advisory for TOTOLINK a720r buffer overflow vulnerability

CVE-2026-82539CRITICAL

TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

48RIESGO

abrir ↗

Referência

CVE-2012-5098

CVE-2012-5098—

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL com

23RIESGO

abrir ↗

Referência

CVE-2008-3125

CVE-2008-3125—

SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.