Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.095 exploits
Referência
CVE-2017-2935
CVE-2017-2935—
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the F
28RIESGO
abrir ↗
Referência
CVE-2014-10015
CVE-2014-10015—
SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to exe
23RIESGO
abrir ↗
Referência
CVE-2021-43326
CVE-2021-43326—
Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.
23RIESGO
abrir ↗
Referência
CVE-2017-3076
CVE-2017-3076—
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC
28RIESGO
abrir ↗
Referência
CVE-2026-105777
CVE-2026-105777MEDIUM
Insertion of Sensitive Information Into Sent Data in GitLab
33RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBP RC3 (2.204) FIX4 - SQL Injection
CVE-2008-1408—webappsphp
SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2011-4801
CVE-2011-4801—
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authenticati
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Autodealers CMS AutOnline - 'pageid' SQL Injection
CVE-2008-4073—webappsphp
SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
team 1.x - File Disclosure / Cross-Site Scripting
CVE-2009-0761—webappsasp
Cross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MonGoose 2.4 (Windows) - WebServer Directory Traversal
CVE-2009-1354—remotewindows
Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in
23RIESGO
abrir ↗
Referência
CVE-2010-2618
CVE-2010-2618—
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena
23RIESGO
abrir ↗
Referência
CVE-2017-3141
CVE-2017-3141HIGH
Windows service and uninstall paths are not quoted when BIND is installed
41RIESGO
abrir ↗
Referência✓ VexDay Proof
KwsPHP 1.0 Member_Space Module - SQL Injection
CVE-2007-4956—webappsphp
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) th
23RIESGO
abrir ↗
Referência
CVE-2026-19067
CVE-2026-19067MEDIUM
itsourcecode Hospital Management System treatment.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2012-10025
CVE-2012-10025CRITICAL
WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion
63RIESGO
abrir ↗
Referência
CVE-2012-10025
CVE-2012-10025CRITICAL
WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion
63RIESGO
abrir ↗
Referência
CVE-2012-10025
CVE-2012-10025CRITICAL
WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion
63RIESGO
abrir ↗
Referência
CVE-2017-11320
CVE-2017-11320—
Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker
23RIESGO
abrir ↗
Referência
CVE-2017-3575
CVE-2017-3575—
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Coupon Script 4.0 - 'id' SQL Injection
CVE-2008-4090—webappsphp
SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência
CVE-2015-8660
CVE-2015-8660—
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op
43RIESGO
abrir ↗
Referência
windows 10/11 - NTLM Hash Disclosure Spoofing
CVE-2025-24054MEDIUMbajo ataqueremotewindows
NTLM Hash Disclosure Spoofing Vulnerability
75RIESGO
abrir ↗
Referência
CVE-2015-8660
CVE-2015-8660—
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op
43RIESGO
abrir ↗
Referência
CVE-2015-8660
CVE-2015-8660—
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op
43RIESGO
abrir ↗
Referência
CVE-2025-6098
CVE-2025-6098CRITICAL
UTT 进取 750W API setSysAdm strcpy buffer overflow
48RIESGO
abrir ↗
Referência
CVE-2017-3576
CVE-2017-3576—
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th
23RIESGO
abrir ↗
Referência
CVE-2026-102843
CVE-2026-102843MEDIUM
gedelumbung HospitalManagement Endpoint data_galeri.php hapus path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-19815
CVE-2026-19815HIGH
TOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-86208
CVE-2026-86208MEDIUM
SourceCodester Class and Exam Timetabling System delete_teacher.php sql injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Katalog Plyt Audio (pl) 1.0 - SQL Injection
CVE-2007-1612—webappsphp
SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitr
23RIESGO
abrir ↗
← anteriorpágina 267 / 870siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.