Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.583exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.890VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.110 exploits
Referência
CVE-2010-1499
CVE-2010-1499—
SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência✓ VexDay Proof
acute control panel 1.0.0 - SQL Injection / Remote File Inclusion
CVE-2009-1247—webappsphp
SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL c
28RIESGO
abrir ↗
Referência
CVE-2010-1499
CVE-2010-1499—
SQL injection vulnerability in genre_artists.php in MusicBox 3.3 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2010-2610
CVE-2010-2610—
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2026-10220
CVE-2026-10220MEDIUM
NousResearch hermes-agent skills_tool.py skill_view injection
33RIESGO
abrir ↗
Referência
CVE-2026-8113
CVE-2026-8113MEDIUM
8421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-8112
CVE-2026-8112MEDIUM
8421bit MiniClaw kernel.ts executeCognitivePulse os command injection
33RIESGO
abrir ↗
Referência✓ VexDay Proof
FlexBB 0.5.5 - '/inc/start.php?_COOKIE' SQL Bypass
CVE-2006-1978—webappsphp
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQ
23RIESGO
abrir ↗
Referência
CVE-2022-50691
CVE-2022-50691CRITICAL
MiniDVBLinux 5.4 Remote Root Command Execution via commands.sh
48RIESGO
abrir ↗
Referência
CVE-2026-4252
CVE-2026-4252CRITICAL
Tenda AC8 IPv6 check_is_ipv6 ip address for authentication
48RIESGO
abrir ↗
Referência
CVE-2012-5334
CVE-2012-5334—
SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2015-4119
CVE-2015-4119—
Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijac
23RIESGO
abrir ↗
Referência
CVE-2014-10019
CVE-2014-10019—
Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Ga
23RIESGO
abrir ↗
Referência
CVE-2016-1885
CVE-2016-1885—
Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1
23RIESGO
abrir ↗
Referência✓ VexDay Proof
iG Calendar 1.0 - 'user.php?id' SQL Injection
CVE-2007-0130—webappsphp
SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL com
23RIESGO
abrir ↗
Referência
CVE-2026-100883
CVE-2026-100883MEDIUM
Krayin laravel-crm acl.php access control
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Okul Web Otomasyon Sistemi 4.0.1 - SQL Injection
CVE-2007-0305—webappsasp
SQL injection vulnerability in etkinlikbak.asp in Okul Web Otomasyon Sistemi 4.0.1 allows remote attackers to execute ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FreeBSD mcweject 0.9 'Eject' - Local Buffer Overflow / Local Privilege Escalation
CVE-2007-1719—localbsd
Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
wolioCMS - Authentication Bypass / SQL Injection
CVE-2007-4156—webappsphp
Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution
CVE-2008-4049—remotewindows
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remot
23RIESGO
abrir ↗
Referência
CVE-2015-4119
CVE-2015-4119—
Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijac
23RIESGO
abrir ↗
Referência
CVE-2018-4863
CVE-2018-4863—
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKE
23RIESGO
abrir ↗
Referência
CVE-2026-8081
CVE-2026-8081MEDIUM
router-for-me CLIProxyAPI api_tools.go server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-7414
CVE-2026-7414CRITICAL
Hardcoded credentials in Yarbo robot firmware
48RIESGO
abrir ↗
Referência
CVE-2026-7413
CVE-2026-7413HIGH
Persistent undocumented backdoor access in Yarbo robot
41RIESGO
abrir ↗
Referência✓ VexDay Proof
phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection
CVE-2009-2178—webappsphp
Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência✓ VexDay Proof
OpenLD 1.2.2 - 'index.php?id' SQL Injection
CVE-2007-3682—webappsphp
SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL co
23RIESGO
abrir ↗
Referência
CVE-2009-3348
CVE-2009-3348—
Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or
23RIESGO
abrir ↗
Referência
CVE-2009-3755
CVE-2009-3755—
Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Shop-Script FREE 2.0 - Remote Command Execution
CVE-2007-4932—webappsphp
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative
23RIESGO
abrir ↗
← anteriorpágina 274 / 871siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.