Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados
34.679CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientespopularesriesgo
21.692 exploits
Referência
Veeam ONE Reporter 9.5.0.3201 - Multiple Cross-Site Request Forgery
CVE-2019-11569—webappsashx
Veeam ONE Reporter 9.5.0.3201 allows CSRF.
23RIESGO
abrir ↗
Referência
PilusCart 1.4.1 - Cross-Site Request Forgery (Add Admin)
CVE-2019-9769—webappsphp
PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as ad
23RIESGO
abrir ↗
Referência
CVE-2013-3721
CVE-2013-3721—
SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2013-3721
CVE-2013-3721—
SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2012-10019
CVE-2012-10019CRITICAL
Front-end Editor < 2.3 - Arbitrary File Upload
63RIESGO
abrir ↗
Referência
CVE-2014-4716
CVE-2014-4716—
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authenticatio
23RIESGO
abrir ↗
Referência
CVE-2014-4716
CVE-2014-4716—
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authenticatio
23RIESGO
abrir ↗
Referência
CVE-2018-13032
CVE-2018-13032—
ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogi
23RIESGO
abrir ↗
Referência
CVE-2016-20085
CVE-2016-20085HIGH
Realtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation
41RIESGO
abrir ↗
Referência
CVE-2013-3961
CVE-2013-3961—
SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to exe
23RIESGO
abrir ↗
Referência
CVE-2017-0358
CVE-2017-0358HIGH
ntfs-3g: Modprobe influence vulnerability via environment variables
56RIESGO
abrir ↗
Referência
CVE-2017-0358
CVE-2017-0358HIGH
ntfs-3g: Modprobe influence vulnerability via environment variables
56RIESGO
abrir ↗
Referência
CVE-2017-14841
CVE-2017-14841—
Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handli
23RIESGO
abrir ↗
Referência
CVE-2026-2686
CVE-2026-2686CRITICAL
SECCN Dingcheng G10 session_login.cgi qq os command injection
48RIESGO
abrir ↗
Referência
CVE-2022-29727
CVE-2022-29727—
Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup param
23RIESGO
abrir ↗
Referência
CVE-2012-5099
CVE-2012-5099—
Cross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LearnLoop 2.0beta7 - 'sFilePath' Remote File Disclosure
CVE-2007-6214—webappsphp
Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read ar
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Pritlog 0.4 - 'Filename' Remote File Disclosure
CVE-2008-6012—webappsphp
Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc is disabled, allows rem
23RIESGO
abrir ↗
Referência
CVE-2014-6409
CVE-2014-6409—
Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authe
23RIESGO
abrir ↗
Referência
CVE-2014-6409
CVE-2014-6409—
Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authe
23RIESGO
abrir ↗
Referência
CVE-2014-4155
CVE-2014-4155—
Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows rem
23RIESGO
abrir ↗
Referência
CVE-2014-4155
CVE-2014-4155—
Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows rem
23RIESGO
abrir ↗
Referência
CVE-2011-5284
CVE-2011-5284—
Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothw
23RIESGO
abrir ↗
Referência
CVE-2011-5284
CVE-2011-5284—
Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothw
23RIESGO
abrir ↗
Referência
CVE-2014-7190
CVE-2014-7190—
Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the auth
23RIESGO
abrir ↗
Referência
CVE-2013-5316
CVE-2013-5316—
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of
23RIESGO
abrir ↗
Referência
CVE-2013-5316
CVE-2013-5316—
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of
23RIESGO
abrir ↗
Referência
CVE-2013-2754
CVE-2013-2754—
Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hij
23RIESGO
abrir ↗
Referência
CVE-2013-2754
CVE-2013-2754—
Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hij
23RIESGO
abrir ↗
Referência
CVE-2018-6936
CVE-2018-6936—
Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account.
23RIESGO
abrir ↗
← anteriorpágina 281 / 724siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.