Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.412exploits catalogados
40.212CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.762VulnCheck XDB 10.014Nuclei 4547Metasploit 3531✓ solo verificadosrecientespopularesriesgo
26.070 exploits
Referência
CVE-2009-4056
CVE-2009-4056—
Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arb
23RIESGO
abrir ↗
Referência
CVE-2009-4820
CVE-2009-4820—
Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote a
23RIESGO
abrir ↗
Referência
CVE-2009-4471
CVE-2009-4471—
Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute arb
23RIESGO
abrir ↗
Referência
CVE-2010-1725
CVE-2010-1725—
SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2010-1725
CVE-2010-1725—
SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2010-3603
CVE-2010-3603—
Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.
23RIESGO
abrir ↗
Referência
CVE-2010-3603
CVE-2010-3603—
Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.
23RIESGO
abrir ↗
Referência
CVE-2010-1726
CVE-2010-1726—
SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2015-6512
CVE-2015-6512—
SQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows
23RIESGO
abrir ↗
Referência
CVE-2019-2000
CVE-2019-2000—
In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local
23RIESGO
abrir ↗
Referência
CVE-2013-10042
CVE-2013-10042CRITICAL
freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2013-10042
CVE-2013-10042CRITICAL
freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2013-0803
CVE-2013-0803—
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arb
60RIESGO
abrir ↗
Referência
CVE-2018-11442
CVE-2018-11442—
A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= U
23RIESGO
abrir ↗
Referência
CVE-2019-1170
CVE-2019-1170HIGH
Windows NTFS Elevation of Privilege Vulnerability
41RIESGO
abrir ↗
Referência
CVE-2019-0555
CVE-2019-0555—
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape
23RIESGO
abrir ↗
Referência
CVE-2020-15149
CVE-2020-15149CRITICAL
Account takeover in NodeBB
48RIESGO
abrir ↗
Referência
CVE-2018-0832
CVE-2018-0832—
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Window
23RIESGO
abrir ↗
Referência
CVE-2012-2437
CVE-2012-2437—
cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to ge
23RIESGO
abrir ↗
Referência★ 1
Sanitized XenForo write-up and proof of concept for CVE-2026-73317.
CVE-2026-73317MEDIUM
XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher
33RIESGO
abrir ↗
Referência
CVE-2026-101143
CVE-2026-101143MEDIUM
Eleveo Quality Management QMBODownload information disclosure
33RIESGO
abrir ↗
Referência✓ VexDay Proof
WebAlbum 2.02pl - COOKIE[skin2] Remote Code Execution
CVE-2006-1480—webappsphp
Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and e
23RIESGO
abrir ↗
Referência
CVE-2010-1047
CVE-2010-1047—
SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2026-101142
CVE-2026-101142MEDIUM
Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal
33RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP Photo Gallery 1.0 - 'photo_id' SQL Injection
CVE-2008-1711—webappsphp
Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which a
23RIESGO
abrir ↗
Referência
CVE-2008-2701
CVE-2008-2701—
SQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows remote attackers to ex
23RIESGO
abrir ↗
Referência
CVE-2010-1740
CVE-2010-1740—
SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2010-1740
CVE-2010-1740—
SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
AyeView 2.20 - Invalid Bitmap Header Parsing Crash
CVE-2008-5937—doswindows
AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via a
23RIESGO
abrir ↗
Referência
CVE-2013-0803
CVE-2013-0803—
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arb
60RIESGO
abrir ↗
← anteriorpágina 245 / 869siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.