Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

75.589exploits catalogados

34.508CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8216Nuclei 4223Metasploit 3464✓ solo verificadosrecientes populares riesgo

21.554 exploits

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

Referência

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

abrir ↗

Referência

CVE-2023-1671

CVE-2023-1671CRITICALbajo ataque

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10

100RIESGO

abrir ↗

Referência

CVE-2024-3273

CVE-2024-3273HIGHbajo ataque

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

100RIESGO

abrir ↗

Referência

CVE-2020-14882

CVE-2020-14882CRITICALbajo ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RIESGO

abrir ↗

Referência

CVE-2022-22954

CVE-2022-22954CRITICALbajo ataqueransomware

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa

100RIESGO

abrir ↗

Referência

CVE-2026-8214

CVE-2026-8214MEDIUM

Industrial Application Software IAS Canias ERP RMI doAction improper authentication

33RIESGO

abrir ↗

Referência

CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

Referência

CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

Referência

CVE-2021-41773

CVE-2021-41773HIGHbajo ataqueransomware

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RIESGO

abrir ↗

Referência

CVE-2024-27199

CVE-2024-27199HIGHbajo ataqueransomware

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

100RIESGO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque

100RIESGO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque

100RIESGO

abrir ↗

Referência

CVE-2022-44877

CVE-2022-44877CRITICALbajo ataque

100RIESGO

abrir ↗

Referência

CVE-2017-12617

CVE-2017-12617HIGHbajo ataque

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT

100RIESGO

abrir ↗

Referência

CVE-2023-42793

CVE-2023-42793CRITICALbajo ataqueransomware

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RIESGO

abrir ↗

Referência

CVE-2024-24919

CVE-2024-24919HIGHbajo ataqueransomware

Information disclosure

100RIESGO

abrir ↗

Referência

CVE-2014-8361

CVE-2014-8361CRITICALbajo ataque

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien

100RIESGO

abrir ↗

Referência

CVE-2014-3704

CVE-2014-3704—

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct

60RIESGO

abrir ↗

Referência

CVE-2017-2445

CVE-2017-2445—

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef

23RIESGO

abrir ↗

Referência

CVE-2022-47986

CVE-2022-47986CRITICALbajo ataqueransomware

IBM Aspera Faspex code execution

100RIESGO

abrir ↗

Referência

CVE-2026-8213

CVE-2026-8213MEDIUM

OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow

33RIESGO

abrir ↗

Referência

CVE-2022-41082

CVE-2022-41082HIGHbajo ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

Referência

CVE-2025-59287

CVE-2025-59287CRITICALbajo ataque

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

100RIESGO

abrir ↗

Referência

CVE-2019-10149

CVE-2019-10149CRITICALbajo ataque

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RIESGO

abrir ↗

Referência

CVE-2018-15961

CVE-2018-15961CRITICALbajo ataque

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr

100RIESGO

abrir ↗

Referência

CVE-2023-38035

CVE-2023-38035CRITICALbajo ataqueransomware

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an

100RIESGO

abrir ↗

Referência

CVE-2021-27065

CVE-2021-27065HIGHbajo ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.