Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.095 exploits
Referência
CVE-2009-3562
Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Referência
CVE-2009-4523
Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗Referência
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗Referência
CVE-2026-112091
Dav-ee dairy-management-system AJAX Endpoint checkfarmer.json.php information disclosure
33RIESGO
abrir ↗Referência
CVE-2009-4681
Cross-site scripting (XSS) vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbit
23RIESGO
abrir ↗Referência
CVE-2017-17582
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RIESGO
abrir ↗Referência
CVE-2026-112086
ESPnet Inference Model inference_model.py build_model deserialization
33RIESGO
abrir ↗Referência
CVE-2026-106933
Blaze Demo Importer < 1.0.17 - Author+ Stored XSS via SVG Upload
33RIESGO
abrir ↗Referência
CVE-2026-106028
ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated Arbitrary Coupon Creation
33RIESGO
abrir ↗Referência
CVE-2008-6891
Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web s
23RIESGO
abrir ↗Referência
CVE-2011-0748
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack th
23RIESGO
abrir ↗Referência✓ VexDay Proof
Thyme 1.3 - 'export_to' Local File Inclusion
Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, allows remo
23RIESGO
abrir ↗Referência✓ VexDay Proof
ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure
Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbi
23RIESGO
abrir ↗Referência
CVE-2014-9582
Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to
23RIESGO
abrir ↗Referência✓ VexDay Proof
LinkBase 2.0 - Remote Cookie Grabber
Cross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers
23RIESGO
abrir ↗Referência
CVE-2015-7865
nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before
23RIESGO
abrir ↗Referência
CVE-2017-17588
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id par
23RIESGO
abrir ↗Referência
CVE-2010-1111
Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary
23RIESGO
abrir ↗Referência✓ VexDay Proof
yogurt 0.3 - Cross-Site Scripting / SQL Injection
Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web scri
23RIESGO
abrir ↗Referência
CVE-2009-3592
Cross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbi
23RIESGO
abrir ↗Referência
CVE-2010-4868
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote atta
23RIESGO
abrir ↗Referência
CVE-2009-4596
Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary w
23RIESGO
abrir ↗Referência✓ VexDay Proof
YNP Portal System 2.2.0 - 'showpage.cgi p' Remote File Disclosure
Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary f
23RIESGO
abrir ↗Referência
CVE-2008-5126
Cross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web
23RIESGO
abrir ↗Referência
CVE-2009-0302
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated
23RIESGO
abrir ↗Referência
CVE-2010-3962
Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary cod
100RIESGO
abrir ↗Referência
CVE-2015-7891
Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with A
23RIESGO
abrir ↗Referência✓ VexDay Proof
Flatnux 2009-01-27 - Remote File Inclusion
PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04,
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.