Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.328exploits catalogados
40.208CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.716VulnCheck XDB 9976Nuclei 4547Metasploit 3531✓ solo verificadosrecientespopularesriesgo
26.070 exploits
Referência
CVE-2010-0690
CVE-2010-0690—
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2026-94540
CVE-2026-94540HIGH
DesktopSMS 1.11.0 Unauthorized Access via Local Service
41RIESGO
abrir ↗
Referência
CVE-2026-109827
CVE-2026-109827MEDIUM
GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write
33RIESGO
abrir ↗
Referência✓ VexDay Proof
WiClear 0.10 - 'path' Remote File Inclusion
CVE-2006-5506—webappsphp
Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code
28RIESGO
abrir ↗
Referência
CVE-2026-58659
CVE-2026-58659HIGH
PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter
41RIESGO
abrir ↗
Referência
CVE-2026-15750
CVE-2026-15750MEDIUM
mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2014-6446
CVE-2014-6446—
The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows
50RIESGO
abrir ↗
Referência
CVE-2020-14750
CVE-2020-14750CRITICALbajo ataque
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RIESGO
abrir ↗
Referência
CVE-2026-8098
CVE-2026-8098MEDIUM
code-projects Feedback System checklogin.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2014-6593
CVE-2014-6593—
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.
50RIESGO
abrir ↗
Referência
CVE-2016-2388
CVE-2016-2388MEDIUMbajo ataque
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user infor
75RIESGO
abrir ↗
Referência
CVE-2017-6444
CVE-2017-6444—
The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast netw
28RIESGO
abrir ↗
Referência
CVE-2026-109620
CVE-2026-109620MEDIUM
SourceCodester Online Reviewer System index.php prepare sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-109607
CVE-2026-109607MEDIUM
SourceCodester Online Exam System Login Endpoint loginExe.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
kawf 1.0 - 'main.php' Remote File Inclusion
CVE-2006-5522—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OTSCMS 2.1.3 - Multiple Remote File Inclusions
CVE-2006-5547—webappsphp
PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.0
23RIESGO
abrir ↗
Referência
CVE-2026-14210
CVE-2026-14210MEDIUM
Insufficient Granularity of Access Control in GitLab
33RIESGO
abrir ↗
Referência
CVE-2008-6392
CVE-2008-6392—
SQL injection vulnerability in showads.php in Z1Exchange allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Referência
CVE-2016-1105
CVE-2016-1105—
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Essentia Web Server 2.15 - GET Remote Denial of Service
CVE-2006-5850—doswindows
Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code vi
23RIESGO
abrir ↗
Referência
CVE-2010-0802
CVE-2010-0802—
SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote a
23RIESGO
abrir ↗
Referência
CVE-2016-4534
CVE-2016-4534—
The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on W
23RIESGO
abrir ↗
Referência
CVE-2019-3929
CVE-2019-3929CRITICALbajo ataque
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba
100RIESGO
abrir ↗
Referência
CVE-2021-40539
CVE-2021-40539CRITICALbajo ataqueransomware
Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resulta
100RIESGO
abrir ↗
Referência
CVE-2026-109176
CVE-2026-109176MEDIUM
MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files
33RIESGO
abrir ↗
Referência
CVE-2026-109175
CVE-2026-109175MEDIUM
MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList
33RIESGO
abrir ↗
Referência
CVE-2026-19934
CVE-2026-19934MEDIUM
itsourcecode Hospital Management System vieworder.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2019-25676
CVE-2019-25676HIGH
Ask Expert Script 3.0.5 Cross Site Scripting SQL Injection
41RIESGO
abrir ↗
Referência
CVE-2017-8489
CVE-2017-8489—
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,
23RIESGO
abrir ↗
Referência
CVE-2017-8537
CVE-2017-8537—
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve
28RIESGO
abrir ↗
← anteriorpágina 221 / 869siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.