Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.095 exploits
Referência
CVE-2018-20448
CVE-2018-20448—
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.
23RIESGO
abrir ↗
Referência
CVE-2019-14804
CVE-2019-14804—
studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template
23RIESGO
abrir ↗
Referência
CVE-2020-10596
CVE-2020-10596—
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upl
23RIESGO
abrir ↗
Referência
CVE-2026-90831
CVE-2026-90831MEDIUM
GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption
33RIESGO
abrir ↗
Referência✓ VexDay Proof
BbZL.php 0.92 - 'lien_2' Local Directory Traversal
CVE-2008-4707—webappsphp
Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized directori
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Admidio 1.4.8 - 'getfile.php' Remote File Disclosure
CVE-2008-5209—webappsphp
Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
SG Real Estate Portal 2.0 - Blind SQL Injection / Local File Inclusion
CVE-2008-6010—webappsphp
Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Minigal b13 - Remote File Disclosure
CVE-2008-6933—webappsphp
Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ComVironment 4.0 - 'grab_globals.lib.php' Remote File Inclusion
CVE-2007-0395—webappsphp
PHP remote file inclusion vulnerability in libraries/grab_globals.lib.php in ComVironment 4.0 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2010-0721
CVE-2010-0721—
SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
VS-Link-Partner 2.1 - 'script_pfad' Remote File Inclusion
CVE-2007-1025—webappsphp
PHP remote file inclusion vulnerability in inc/functions_inc.php in VS-Link-Partner 2.1 and earlier allows remote attack
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MPM Chat 2.5 - 'view.php?logi' Local File Inclusion
CVE-2007-1613—webappsphp
Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary l
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WebKalk2 1.9.0 - 'absolute_path' Remote File Inclusion
CVE-2007-2307—webappsphp
PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
TorrentTrader Classic 1.07 - Multiple Vulnerabilities
CVE-2007-5312—webappsphp
Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web s
23RIESGO
abrir ↗
Referência
CVE-2026-19348
CVE-2026-19348CRITICAL
Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection
48RIESGO
abrir ↗
Referência
CVE-2024-23897
CVE-2024-23897CRITICALbajo ataqueransomware
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RIESGO
abrir ↗
Referência✓ VexDay Proof
falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting
CVE-2007-6488—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbi
23RIESGO
abrir ↗
Referência✓ VexDay Proof
ScriptMagix Recipes 2.0 - 'index.php?catid' SQL Injection
CVE-2007-1617—webappsphp
SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Basic-CMS - SQL Injection
CVE-2008-2789—webappsphp
SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands vi
43RIESGO
abrir ↗
Referência
CVE-2026-90814
CVE-2026-90814MEDIUM
cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-90813
CVE-2026-90813MEDIUM
cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize
33RIESGO
abrir ↗
Referência
CVE-2026-19347
CVE-2026-19347MEDIUM
itsourcecode Hospital Management System viewdoctor.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2015-2843
CVE-2015-2843—
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute
50RIESGO
abrir ↗
Referência
CVE-2015-5531
CVE-2015-5531—
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp
60RIESGO
abrir ↗
Referência✓ VexDay Proof
Comparison Engine Power 1.0 - Blind SQL Injection
CVE-2008-2791—webappsphp
SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote
23RIESGO
abrir ↗
Referência✓ VexDay Proof
X7 Chat 2.0.1A1 - 'mini.php' Local File Inclusion
CVE-2008-4718—webappsphp
Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include an
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Active PHP Bookmark Notes 0.2.5 - Remote File Inclusion
CVE-2007-1621—webappsphp
PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB) 0.2.5 and earlier allow
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pakupaku CMS 0.4 - Arbitrary File Upload / Local File Inclusion
CVE-2007-4641—webappsphp
Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and ex
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Apple iTunes 8.1.1 - 'ITMS' Multiple Protocol Handler Buffer Overflow (Metasploit)
CVE-2009-0950—remoteosx
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni
43RIESGO
abrir ↗
Referência
CVE-2019-0881
CVE-2019-0881—
An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration, aka 'Windows
23RIESGO
abrir ↗
← anteriorpágina 258 / 870siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.