Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
75.526exploits catalogados
34.478CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8213Nuclei 4218Metasploit 3464✓ solo verificadosrecientespopularesriesgo
24.443 exploits
Exploit-DB
Horizon QCMS 4.0 - Multiple Vulnerabilities
SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a
100RIESGO
abrir ↗Exploit-DB
PHPJabbers Event Booking Calendar 2.0 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attacke
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
DomPHP 0.83 - SQL Injection
SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remot
23RIESGO
abrir ↗Exploit-DB
DomPHP 0.83 - Local Directory Traversal
Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a ..
43RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UAEPD Shopping Script - 'news.php?id' SQL Injection
Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
UAEPD Shopping Script - 'products.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/backup/backup_ray2.php' Database Backup Direct Request Information Disclosure
Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backup_ray2.php, which a
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_school_years.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_school_names.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_subjects.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_relations.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_terms.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_grades.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_generations.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_media_codes_1.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_infraction_codes.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_titles.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/health_allergies.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IcoFX - Local Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCoun
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
vTiger CRM 5.4.0 SOAP - AddEmailAttachment Arbitrary File Upload (Metasploit)
vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
60RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/add_topic.php' Cross-Site Request Forgery (Topic Creation)
Multiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management System 1.06.01 allow rem
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/admin_sgrades.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to exe
23RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Forms Viewer - Unicode Buffer Overflow (Metasploit)
Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to exe
50RIESGO
abrir ↗Exploit-DB✓ VexDay Proof
Command School Student Management System - '/sw/Admin_change_Password.php' Cross-Site Request Forgery (Admin Password Manipulation)
Multiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management System 1.06.01 allow rem
23RIESGO
abrir ↗Exploit-DB
Cubic CMS - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗Exploit-DB
Seagate BlackArmor NAS sg2000-2000.1331 - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg200
23RIESGO
abrir ↗Exploit-DB
Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution
Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via s
28RIESGO
abrir ↗Exploit-DB
Seagate BlackArmor NAS sg2000-2000.1331 - Multiple Persistent Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.