Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.388exploits catalogados
40.212CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.762VulnCheck XDB 9990Nuclei 4547Metasploit 3531✓ solo verificadosrecientespopularesriesgo
26.070 exploits
Referência
CVE-2026-49491
CVE-2026-49491HIGH
Pixa Bank 2.0 SQL Injection via agence-ajax.php API
41RIESGO
abrir ↗
Referência
CVE-2016-4004
CVE-2016-4004—
Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated adminis
23RIESGO
abrir ↗
Referência
CVE-2012-6644
CVE-2012-6644—
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web scr
23RIESGO
abrir ↗
Referência
CVE-2013-3639
CVE-2013-3639—
Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbi
23RIESGO
abrir ↗
Referência
CVE-2018-0715
CVE-2018-0715—
Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inje
23RIESGO
abrir ↗
Referência
CVE-2026-17530
CVE-2026-17530MEDIUM
AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Kim Websites 1.0 - Authentication Bypass
CVE-2009-1026—webappsphp
Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2018-18955
CVE-2018-18955—
In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat
38RIESGO
abrir ↗
Referência
CVE-2019-3474
CVE-2019-3474MEDIUM
Path traversal vulnerability in Filr web application
33RIESGO
abrir ↗
Referência✓ VexDay Proof
eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)
CVE-2009-1028—doswindows
Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z
50RIESGO
abrir ↗
Referência
CVE-2023-4490
CVE-2023-4490CRITICAL
WP Job Portal < 2.0.6 - Unauthenticated SQLi
63RIESGO
abrir ↗
Referência
CVE-2023-38357
CVE-2023-38357—
Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized a
23RIESGO
abrir ↗
Referência
CVE-2026-5813
CVE-2026-5813MEDIUM
PHPGurukul Online Course Registration check_availability.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-5812
CVE-2026-5812MEDIUM
SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error
33RIESGO
abrir ↗
Referência
CVE-2011-5183
CVE-2011-5183—
Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wanewsletter 2.1.3 - Remote File Inclusion
CVE-2007-2969—webappsphp
PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to e
35RIESGO
abrir ↗
Referência
CVE-2026-13596
CVE-2026-13596CRITICAL
Participants Database < 2.7.8.4 - Unauthenticated SQL Injection via List Search
48RIESGO
abrir ↗
Referência
CVE-2015-6101
CVE-2015-6101—
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi
23RIESGO
abrir ↗
Referência
CVE-2017-8912
CVE-2017-8912HIGH
CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code para
41RIESGO
abrir ↗
Referência
CVE-2018-6364
CVE-2018-6364—
SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.
23RIESGO
abrir ↗
Referência
CVE-2019-20354
CVE-2019-20354—
The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user)
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Stash 1.0.3 - Multiple SQL Injections
CVE-2008-4080—webappsphp
SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2012-2905
CVE-2012-2905—
Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access
23RIESGO
abrir ↗
Referência
CVE-2010-2921
CVE-2010-2921—
SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla!
23RIESGO
abrir ↗
Referência
CVE-2010-4901
CVE-2010-4901—
Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Scriptsez Easy Image Downloader - Local File Download
CVE-2008-6089—webappsphp
Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitra
23RIESGO
abrir ↗
Referência
CVE-2026-16276
CVE-2026-16276LOW
Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search
28RIESGO
abrir ↗
Referência✓ VexDay Proof
FreeBSD 7.0/7.1 - 'ktimer' Local Privilege Escalation
CVE-2009-1041—localfreebsd
The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel
23RIESGO
abrir ↗
Referência
CVE-2009-4222
CVE-2009-4222—
phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote at
23RIESGO
abrir ↗
Referência
CVE-2026-13609
CVE-2026-13609HIGH
Frontend Admin by DynamiApps < 3.29.9 - Unauthenticated Stored Cross-Site Scripting via Form Field
41RIESGO
abrir ↗
← anteriorpágina 225 / 869siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.