Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.634exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.110 exploits
Referência
CVE-2010-0796
CVE-2010-0796—
SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2019-1364
CVE-2019-1364—
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
23RIESGO
abrir ↗
Referência
CVE-2015-5603
CVE-2015-5603—
The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java
50RIESGO
abrir ↗
Referência
CVE-2019-25759
CVE-2019-25759HIGH
Joomla! Component vBizz 1.0.7 SQL Injection
41RIESGO
abrir ↗
Referência
CVE-2015-5603
CVE-2015-5603—
The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java
50RIESGO
abrir ↗
Referência✓ VexDay Proof
SimpleBlog 2.0 - 'comments.asp' SQL Injection (1)
CVE-2006-4300—webappsasp
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência
CVE-2026-18048
CVE-2026-18048HIGH
WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Barman 0.0.1r3 - 'Interface.php' Remote File Inclusion
CVE-2006-6611—webappsphp
PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2026-90613
CVE-2026-90613MEDIUM
GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion
33RIESGO
abrir ↗
Referência
CVE-2026-16295
CVE-2026-16295MEDIUM
Clearfy < 2.4.3 - Subscriber+ Sensitive Information Disclosure via Factory Page-Action Dispatcher
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Blog PixelMotion - 'sauvBase.php' Arbitrary Database Backup
CVE-2008-1868—webappsphp
admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2026-12698
CVE-2026-12698MEDIUM
wpForo Forum < 3.1.3 - Subscriber+ Account Status and Reputation Manipulation via Profile Update Mass Assignment
33RIESGO
abrir ↗
Referência
CVE-2011-0886
CVE-2011-0886—
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Busin
23RIESGO
abrir ↗
Referência
CVE-2026-6133
CVE-2026-6133HIGH
Tenda F451 SafeUrlFilter fromSafeUrlFilter stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2015-3036
CVE-2015-3036—
Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in c
28RIESGO
abrir ↗
Referência
CVE-2015-3036
CVE-2015-3036—
Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in c
28RIESGO
abrir ↗
Referência
CVE-2015-5621
CVE-2015-5621HIGH
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnm
53RIESGO
abrir ↗
Referência✓ VexDay Proof
realm CMS 2.3 - Multiple Vulnerabilities
CVE-2008-2681—webappsphp
Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to _db/compact.as
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Thickbox Gallery 2.0 - 'Admins.php' Admin Data Disclosure
CVE-2008-3859—webappsphp
Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a dire
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Bandwebsite 1.5 - SQL Injection / Cross-Site Scripting
CVE-2008-5337—webappsphp
SQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
BS.Player 2.34 Build 980 - '.bsl' Local Buffer Overflow (SEH)
CVE-2009-1068—localwindows
Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote
28RIESGO
abrir ↗
Referência✓ VexDay Proof
DM FileManager 3.9.2 - Insecure Cookie Handling
CVE-2009-2025—webappsphp
admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access
23RIESGO
abrir ↗
Referência
CVE-2010-0796
CVE-2010-0796—
SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2010-0802
CVE-2010-0802—
SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote a
23RIESGO
abrir ↗
Referência
CVE-2009-4675
CVE-2009-4675—
admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative
23RIESGO
abrir ↗
Referência
CVE-2009-5087
CVE-2009-5087—
Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2024-25004
CVE-2024-25004HIGH
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insuf
41RIESGO
abrir ↗
Referência
CVE-2026-71969
CVE-2026-71969HIGH
OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations
41RIESGO
abrir ↗
Referência
CVE-2018-6226
CVE-2018-6226—
Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files
23RIESGO
abrir ↗
Referência
CVE-2026-90608
CVE-2026-90608CRITICAL
Totolink A3002MU boa formPortFw buffer overflow
48RIESGO
abrir ↗
← anteriorpágina 276 / 871siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.