Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.679exploits catalogados
40.329CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.150Exploit-DB 24.488GitHub PoC 17.946VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.150 exploits
Referência
CVE-2016-1464
CVE-2016-1464—
Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code
23RIESGO
abrir ↗
Referência
CVE-2010-4837
CVE-2010-4837—
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RIESGO
abrir ↗
Referência
CVE-2026-82193
CVE-2026-82193MEDIUM
WPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path Traversal
33RIESGO
abrir ↗
Referência
CVE-2017-14961
CVE-2017-14961—
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating
23RIESGO
abrir ↗
Referência
CVE-2015-6009
CVE-2015-6009—
Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to e
23RIESGO
abrir ↗
Referência
CVE-2022-46637
CVE-2022-46637CRITICAL
Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.
48RIESGO
abrir ↗
Referência
CVE-2009-3153
CVE-2009-3153—
Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbi
23RIESGO
abrir ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RIESGO
abrir ↗
Referência
CVE-2017-14961
CVE-2017-14961—
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating
23RIESGO
abrir ↗
Referência
CVE-2026-80114
CVE-2026-80114HIGH
PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sys
41RIESGO
abrir ↗
Referência✓ VexDay Proof
Gravy Media Photo Host 1.0.8 - Local File Disclosure
CVE-2009-2184—webappsphp
Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to re
23RIESGO
abrir ↗
Referência
CVE-2009-4366
CVE-2009-4366—
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitra
23RIESGO
abrir ↗
Referência
CVE-2009-2551
CVE-2009-2551—
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject
23RIESGO
abrir ↗
Referência
CVE-2009-4678
CVE-2009-4678—
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2009-4678
CVE-2009-4678—
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RIESGO
abrir ↗
Referência
CVE-2010-0936
CVE-2010-0936—
Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allow
23RIESGO
abrir ↗
Referência
CVE-2010-1945
CVE-2010-1945—
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all
23RIESGO
abrir ↗
Referência
CVE-2010-2122
CVE-2010-2122—
Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r
43RIESGO
abrir ↗
Referência
CVE-2010-3457
CVE-2010-3457—
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arb
23RIESGO
abrir ↗
Referência
CVE-2010-3457
CVE-2010-3457—
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arb
23RIESGO
abrir ↗
Referência
CVE-2010-4837
CVE-2010-4837—
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RIESGO
abrir ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RIESGO
abrir ↗
Referência
CVE-2010-2122
CVE-2010-2122—
Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r
43RIESGO
abrir ↗
Referência
CVE-2026-13547
CVE-2026-13547MEDIUM
Hanwang e-Face General Management Platform upload.do unrestricted upload
33RIESGO
abrir ↗
Referência
CVE-2021-31761
CVE-2021-31761—
Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's ru
35RIESGO
abrir ↗
Referência
CVE-2026-13516
CVE-2026-13516HIGH
Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-13503
CVE-2026-13503MEDIUM
antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal
33RIESGO
abrir ↗
Referência
CVE-2012-10036
CVE-2012-10036CRITICAL
Project Pier <= 0.8.8 Arbitrary File Upload RCE
63RIESGO
abrir ↗
Referência
CVE-2012-10036
CVE-2012-10036CRITICAL
Project Pier <= 0.8.8 Arbitrary File Upload RCE
63RIESGO
abrir ↗
← anteriorpágina 290 / 872siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.