Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.634exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.110 exploits
Referência✓ VexDay Proof
EZContents 1.4.5 - 'index.php?link' Remote File Disclosure
Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a
23RIESGO
abrir ↗Referência
CVE-2026-7785
A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection
33RIESGO
abrir ↗Referência
CVE-2026-7784
RTGS2017 NagaAgent Skills Endpoint extensions.py path traversal
33RIESGO
abrir ↗Referência
CVE-2011-3833
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote
43RIESGO
abrir ↗Referência
CVE-2026-7783
CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection
33RIESGO
abrir ↗Referência
CVE-2026-7782
CodeCanyon Perfex CRM Tenant Clients.php project authorization
33RIESGO
abrir ↗Referência
CVE-2026-7781
Open5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of service
33RIESGO
abrir ↗Referência
CVE-2026-94267
Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action
48RIESGO
abrir ↗Referência
CVE-2023-54357
Joomla com_booking 2.4.9 Information Disclosure via Account Enumeration
41RIESGO
abrir ↗Referência
CVE-2017-8684
Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R
23RIESGO
abrir ↗Referência
CVE-2026-57951
Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table
41RIESGO
abrir ↗Referência
CVE-2026-82556
Forgejo Repository Migration is_migrate_allowed.go net.LookupIP server-side request forgery
33RIESGO
abrir ↗Referência
CVE-2026-109935
Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API
33RIESGO
abrir ↗Referência
CVE-2017-16928
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently g
23RIESGO
abrir ↗Referência✓ VexDay Proof
Flat PHP Board 1.2 - Multiple Vulnerabilities
index.php in Flat PHP Board 1.2 and earlier allows remote authenticated users to obtain the password for the current use
23RIESGO
abrir ↗Referência
CVE-2010-3203
Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read
38RIESGO
abrir ↗Referência
CVE-2010-3204
Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP co
23RIESGO
abrir ↗Referência
CVE-2017-8708
The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
23RIESGO
abrir ↗Referência
CVE-2026-19223
Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite
41RIESGO
abrir ↗Referência
CVE-2026-8777
Edimax BR-6428NS POST Request formStaDrvSetup command injection
33RIESGO
abrir ↗Referência
CVE-2017-17575
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
23RIESGO
abrir ↗Referência✓ VexDay Proof
Libera CMS 1.12 - 'cookie' SQL Injection
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remot
23RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.