Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados

40.258CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientes populares riesgo

26.095 exploits

Referência✓ VexDay Proof

Dagger CMS 2008 - 'dir_inc' Remote File Inclusion

CVE-2008-6635—webappsphp

PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when re

23RIESGO

abrir ↗

Referência✓ VexDay Proof

cPanel 11.x - Cross-Site Scripting / Local File Inclusion

CVE-2008-6926—webappsphp

Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel al

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component gigCalendar 1.0 - SQL Injection

CVE-2009-0726—webappsphp

SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers

23RIESGO

abrir ↗

Referência✓ VexDay Proof

NetHoteles 3.0 - 'ficha.php' SQL Injection

CVE-2009-1346—webappsphp

SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência

CVE-2010-2909

CVE-2010-2909—

SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla! allows remote attacker

23RIESGO

abrir ↗

Referência

CVE-2015-5736

CVE-2015-5736—

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel

23RIESGO

abrir ↗

Referência

CVE-2015-5889

CVE-2015-5889—

rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors inv

38RIESGO

abrir ↗

Referência

CVE-2017-14355

CVE-2017-14355—

A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability

23RIESGO

abrir ↗

Referência✓ VexDay Proof

2DayBiz Business Community Script - Multiple Vulnerabilities

CVE-2009-1651—webappsphp

SQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script allows remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2010-3154

CVE-2010-3154—

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attac

28RIESGO

abrir ↗

Referência

CVE-2021-33701

CVE-2021-33701CRITICAL

DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 201

48RIESGO

abrir ↗

Referência

CVE-2021-33701

CVE-2021-33701CRITICAL

DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 201

48RIESGO

abrir ↗

Referência

CVE-2025-66261

CVE-2025-66261CRITICAL

Unauthenticated OS Command Injection (restore_settings.php)

48RIESGO

abrir ↗

Referência

CVE-2025-66253

CVE-2025-66253CRITICAL

Unauthenticated OS Command Injection (start_upgrade.php)

48RIESGO

abrir ↗

Referência

CVE-2018-1213

CVE-2018-1213—

Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, an

23RIESGO

abrir ↗

Referência

CVE-2018-9034

CVE-2018-9034—

Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-6509—webappsjsp

SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execut

23RIESGO

abrir ↗

Referência

CVE-2025-5624

CVE-2025-5624CRITICAL

D-Link DIR-816 QoSPortSetup stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2025-5622

CVE-2025-5622CRITICAL

D-Link DIR-816 wirelessApcli_5g stack-based overflow

48RIESGO

abrir ↗

Referência✓ VexDay Proof

TurnkeyForms Web Hosting Directory - Multiple Vulnerabilities

CVE-2008-6940—webappsphp

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, whi

23RIESGO

abrir ↗

Referência

CVE-2016-0491

CVE-2016-0491—

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12

60RIESGO

abrir ↗

Referência

Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting

CVE-2020-35241—webappsphp

FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an

23RIESGO

abrir ↗

Referência

CVE-2026-19068

CVE-2026-19068MEDIUM

itsourcecode Hospital Management System treatmentdetail.php sql injection

33RIESGO

abrir ↗

Referência

CVE-2012-2906

CVE-2012-2906—

Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r422

23RIESGO

abrir ↗

Referência

CVE-2020-35313

CVE-2020-35313—

A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in Wonder

35RIESGO

abrir ↗

Referência

CVE-2026-19019

CVE-2026-19019MEDIUM

poco-ai poco-agent Claude File workspace.py WorkspaceManager._setup_session_persistence cleanup

33RIESGO

abrir ↗

Referência

CVE-2026-78059

CVE-2026-78059MEDIUM

SourceCodester Stock Management System printOrder.php cross site scripting

33RIESGO

abrir ↗

Referência✓ VexDay Proof

PHP Real Estate Classifieds - Remote File Inclusion

CVE-2007-3160—webappsphp

PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote at

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Softbiz Freelancers Script 1 - SQL Injection

CVE-2007-6124—webappsphp

Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject

23RIESGO

abrir ↗

Referência

CVE-2012-5104

CVE-2012-5104—

Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attacke

23RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.