Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.095 exploits
Referência✓ VexDay Proof
yogurt 0.3 - Cross-Site Scripting / SQL Injection
CVE-2009-2033—webappsphp
Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗
Referência
CVE-2009-3592
CVE-2009-3592—
Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbi
23RIESGO
abrir ↗
Referência
CVE-2010-4868
CVE-2010-4868—
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2009-4596
CVE-2009-4596—
Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗
Referência✓ VexDay Proof
YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure
CVE-2007-4256—webappscgi
Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary f
23RIESGO
abrir ↗
Referência
CVE-2008-5126
CVE-2008-5126—
Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência
CVE-2009-0302
CVE-2009-0302—
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated
23RIESGO
abrir ↗
Referência
CVE-2010-3962
CVE-2010-3962HIGHbajo ataque
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary cod
100RIESGO
abrir ↗
Referência
CVE-2010-20113
CVE-2010-20113CRITICAL
EasyFTP Server list.html path Stack Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2010-20113
CVE-2010-20113CRITICAL
EasyFTP Server list.html path Stack Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2015-7891
CVE-2015-7891—
Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with A
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Flatnux 2009-01-27 - Remote File Inclusion
CVE-2009-0572—webappsphp
PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04,
23RIESGO
abrir ↗
Referência
CVE-2012-10053
CVE-2012-10053CRITICAL
Simple Web Server Connection Header Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2012-10053
CVE-2012-10053CRITICAL
Simple Web Server Connection Header Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2012-10053
CVE-2012-10053CRITICAL
Simple Web Server Connection Header Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2012-10053
CVE-2012-10053CRITICAL
Simple Web Server Connection Header Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2009-4767
CVE-2009-4767—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2017-17591
CVE-2017-17591—
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection
CVE-2007-4258—webappsphp
SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-4822
CVE-2009-4822—
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2026-110656
CVE-2026-110656LOW
miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseelt
28RIESGO
abrir ↗
Referência
CVE-2026-110654
CVE-2026-110654MEDIUM
libzvbi through 0.2.45 Out-of-Bounds Write via Teletext DRCS convert_drcs
33RIESGO
abrir ↗
Referência
CVE-2010-1746
CVE-2010-1746—
Multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com_grid) component for Joomla! allow remote attack
23RIESGO
abrir ↗
Referência
CVE-2017-17606
CVE-2017-17606—
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2010-3972
CVE-2010-3972—
Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0
60RIESGO
abrir ↗
Referência
CVE-2008-4349
CVE-2008-4349—
Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject a
23RIESGO
abrir ↗
Referência
CVE-2026-106469
CVE-2026-106469MEDIUM
Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG Icon
33RIESGO
abrir ↗
Referência
CVE-2012-1603
CVE-2012-1603—
Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL
23RIESGO
abrir ↗
Referência
CVE-2017-17608
CVE-2017-17608—
Child Care Script 1.0 has SQL Injection via the /list city parameter.
23RIESGO
abrir ↗
Referência
CVE-2009-3751
CVE-2009-3751—
Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script
23RIESGO
abrir ↗
← anteriorpágina 251 / 870siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.