Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.634exploits catalogados
40.286CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.110Exploit-DB 24.488GitHub PoC 17.941VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.110 exploits
Referência
CVE-2015-2198
CVE-2015-2198—
Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote attackers to i
23RIESGO
abrir ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RIESGO
abrir ↗
Referência
CVE-2026-41949
CVE-2026-41949HIGH
Dify < 1.14.2 Authorization Bypass via File Preview Endpoint
41RIESGO
abrir ↗
Referência
CVE-2016-7390
CVE-2016-7390—
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RIESGO
abrir ↗
Referência
CVE-2026-41948
CVE-2026-41948CRITICAL
Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access
68RIESGO
abrir ↗
Referência
CVE-2009-20009
CVE-2009-20009CRITICAL
Belkin Bulldog Plus Web Service Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2009-20009
CVE-2009-20009CRITICAL
Belkin Bulldog Plus Web Service Buffer Overflow
63RIESGO
abrir ↗
Referência
CVE-2025-34055
CVE-2025-34055CRITICAL
AVTECH IP camera, DVR, and NVR Devices Authenticated Root Command Execution
48RIESGO
abrir ↗
Referência
CVE-2026-115505
CVE-2026-115505HIGH
libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods
CVE-2007-3633—remotewindows
Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 al
23RIESGO
abrir ↗
Referência
CVE-2026-115504
CVE-2026-115504HIGH
CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c
41RIESGO
abrir ↗
Referência
CVE-2026-14795
CVE-2026-14795MEDIUM
CodeAstro Apartment Visitor Management System action-visitor.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2016-1464
CVE-2016-1464—
Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code
23RIESGO
abrir ↗
Referência
CVE-2010-4837
CVE-2010-4837—
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RIESGO
abrir ↗
Referência
CVE-2026-82193
CVE-2026-82193MEDIUM
WPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path Traversal
33RIESGO
abrir ↗
Referência
CVE-2017-14961
CVE-2017-14961—
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating
23RIESGO
abrir ↗
Referência
CVE-2015-6009
CVE-2015-6009—
Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2022-46637
CVE-2022-46637CRITICAL
Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.
48RIESGO
abrir ↗
Referência
CVE-2009-3153
CVE-2009-3153—
Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbi
23RIESGO
abrir ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RIESGO
abrir ↗
Referência
CVE-2017-14961
CVE-2017-14961—
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating
23RIESGO
abrir ↗
Referência
CVE-2026-80114
CVE-2026-80114HIGH
PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sys
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Gravy Media Photo Host 1.0.8 - Local File Disclosure
CVE-2009-2184—webappsphp
Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to re
23RIESGO
abrir ↗
Referência
CVE-2009-4366
CVE-2009-4366—
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência
CVE-2009-2551
CVE-2009-2551—
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2009-4678
CVE-2009-4678—
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-4678
CVE-2009-4678—
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-0936
CVE-2010-0936—
Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allow
23RIESGO
abrir ↗
Referência
CVE-2010-1945
CVE-2010-1945—
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all
23RIESGO
abrir ↗
← anteriorpágina 280 / 871siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.