Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.107exploits catalogados

34.679CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8460Nuclei 4233Metasploit 3467✓ solo verificadosrecientes populares riesgo

21.692 exploits

Referência

CVE-2017-7455

CVE-2017-7455—

Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

28RIESGO

abrir ↗

Referência

CVE-2017-7455

CVE-2017-7455—

Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

28RIESGO

abrir ↗

Referência

CVE-2010-1532

CVE-2010-1532—

Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo

43RIESGO

abrir ↗

Referência

CVE-2010-1532

CVE-2010-1532—

Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo

43RIESGO

abrir ↗

Referência

CVE-2015-5065

CVE-2015-5065—

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic

28RIESGO

abrir ↗

Referência

CVE-2015-5065

CVE-2015-5065—

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic

28RIESGO

abrir ↗

Referência

CVE-2018-0834

CVE-2018-0834—

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot

35RIESGO

abrir ↗

Referência

CVE-2010-3142

CVE-2010-3142—

Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attacker

28RIESGO

abrir ↗

Referência

CVE-2018-14485

CVE-2018-14485—

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

28RIESGO

abrir ↗

Referência

CVE-2018-14485

CVE-2018-14485—

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

28RIESGO

abrir ↗

Referência

CVE-2022-31125

CVE-2022-31125CRITICAL

Authentication Bypass in Roxy-wi

53RIESGO

abrir ↗

Referência

CVE-2020-23935

CVE-2020-23935—

Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (

28RIESGO

abrir ↗

Referência

CVE-2009-4660

CVE-2009-4660—

Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to

50RIESGO

abrir ↗

Referência

CVE-2020-8639

CVE-2020-8639—

An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute ar

28RIESGO

abrir ↗

Referência

CVE-2018-1042

CVE-2018-1042—

Moodle 3.x has Server Side Request Forgery in the filepicker.

28RIESGO

abrir ↗

Referência

CVE-2025-2775

CVE-2025-2775CRITICALbajo ataque

SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

100RIESGO

abrir ↗

Referência

CVE-2019-0571

CVE-2019-0571—

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,

28RIESGO

abrir ↗

Referência

CVE-2011-0518

CVE-2011-0518—

Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allo

43RIESGO

abrir ↗

Referência

CVE-2012-3575

CVE-2012-3575—

Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attacke

28RIESGO

abrir ↗

Referência

CVE-2010-2128

CVE-2010-2128—

Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote a

43RIESGO

abrir ↗

Referência

CVE-2021-43062

CVE-2021-43062MEDIUM

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0

53RIESGO

abrir ↗

Referência

CVE-2017-5799

CVE-2017-5799—

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP ve

28RIESGO

abrir ↗

Referência

CVE-2018-1821

CVE-2018-1821HIGH

IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) a

46RIESGO

abrir ↗

Referência

CVE-2010-2033

CVE-2010-2033—

Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Jooml

43RIESGO

abrir ↗

Referência✓ VexDay Proof

PHPBB2 MODificat 0.2.0 - 'functions.php' Remote File Inclusion

CVE-2007-0656—webappsphp

PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote at

28RIESGO

abrir ↗

Referência

CVE-2010-4719

CVE-2010-4719—

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r

43RIESGO

abrir ↗

Referência

CVE-2010-4719

CVE-2010-4719—

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r

43RIESGO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Flash Tree Gallery 1.0 - Remote File Inclusion

CVE-2008-6482—webappsphp

PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Jooml

28RIESGO

abrir ↗

Referência

CVE-2020-35729

CVE-2020-35729—

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.

60RIESGO

abrir ↗

Referência

CVE-2018-8469

CVE-2018-8469—

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCont

28RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.