Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
75.902exploits catalogados
34.597CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8410Nuclei 4231Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.624 exploits
Referência
CVE-2018-9236
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.
23RIESGO
abrir ↗Referência
CVE-2018-15707
Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could
23RIESGO
abrir ↗Referência
CVE-2011-5149
Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbit
23RIESGO
abrir ↗Referência
CVE-2009-3449
MP3 Collector 2.3 allows remote attackers to cause a denial of service (application crash) via a long URL in a .m3u play
23RIESGO
abrir ↗Referência✓ VexDay Proof
ContentNow 1.39 - 'pageid' SQL Injection
SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗Referência✓ VexDay Proof
bcoos 1.0.10 - Local File Inclusion / SQL Injection
Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute a
23RIESGO
abrir ↗Referência✓ VexDay Proof
Simple PHP NewsLetter 1.5 - Local File Inclusion
Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files
23RIESGO
abrir ↗Referência✓ VexDay Proof
NotFTP 1.3.1 - 'newlang' Local File Inclusion
Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗Referência✓ VexDay Proof
TransLucid 1.75 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗Referência
CVE-2010-0801
Directory traversal vulnerability in the AutartiTarot (com_autartitarot) component 1.0.3 for Joomla! allows remote authe
23RIESGO
abrir ↗Referência
CVE-2012-6523
Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗Referência
CVE-2018-11332
Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in
23RIESGO
abrir ↗Referência
CVE-2020-8825
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.
23RIESGO
abrir ↗Referência
CVE-2017-8836
CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_
23RIESGO
abrir ↗Referência
CVE-2011-5267
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as
23RIESGO
abrir ↗Referência✓ VexDay Proof
Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection
Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HT
23RIESGO
abrir ↗Referência✓ VexDay Proof
Pluxml 0.3.1 - Remote Code Execution
Cross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Referência✓ VexDay Proof
Artmedic CMS 3.4 - 'index.php' Local File Inclusion
Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗Referência
CVE-2009-3948
JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and applicati
23RIESGO
abrir ↗Referência
CVE-2009-4659
Unspecified vulnerability in MP3-Cutter Ease Audio Cutter 1.20 allows user-assisted remote attackers to cause a denial o
23RIESGO
abrir ↗Referência
CVE-2018-11124
Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows
23RIESGO
abrir ↗Referência
CVE-2022-35899
There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local
23RIESGO
abrir ↗Referência
CVE-2013-4867
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
23RIESGO
abrir ↗Referência
CVE-2010-3462
Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly
23RIESGO
abrir ↗Referência
CVE-2010-3467
SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial modul
23RIESGO
abrir ↗Referência
CVE-2010-3467
SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial modul
23RIESGO
abrir ↗Referência
CVE-2018-10314
Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Referência
CVE-2012-4251
Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web
23RIESGO
abrir ↗Referência
phpVibe < 4.20 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary we
23RIESGO
abrir ↗Referência
CVE-2015-5399
Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary we
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.