Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.790exploits catalogados

40.379CVEs con explotación pública

24.696probados en laboratorio

Todos Referência 26.190Exploit-DB 24.488GitHub PoC 18.003VulnCheck XDB 10.016Nuclei 4556Metasploit 3537✓ solo verificadosrecientes populares riesgo

26.190 exploits

Referência

CVE-2010-0158

CVE-2010-0158—

SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execut

23RIESGO

abrir ↗

Referência

CVE-2010-1660

CVE-2010-1660—

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2026-101069

CVE-2026-101069MEDIUM

dbgate Export databaseConnections.js exportModelSql path traversal

33RIESGO

abrir ↗

Referência

CVE-2010-1660

CVE-2010-1660—

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2026-76590

CVE-2026-76590CRITICAL

TRENDnet TEW-755AP ssi wan.cgi stack-based overflow

48RIESGO

abrir ↗

Referência

CVE-2026-19344

CVE-2026-19344MEDIUM

code-projects Task Management System comment_count_user.php sql injection

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Mambo Component musepoes - 'aid' SQL Injection

CVE-2008-0579—webappsphp

SQL injection vulnerability in index.php in the buslicense (com_buslicense) component for Joomla! allows remote attacker

23RIESGO

abrir ↗

Referência

CVE-2012-10026

CVE-2012-10026CRITICAL

WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

63RIESGO

abrir ↗

Referência

CVE-2012-10026

CVE-2012-10026CRITICAL

WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

63RIESGO

abrir ↗

Referência

CVE-2012-10026

CVE-2012-10026CRITICAL

WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

63RIESGO

abrir ↗

Referência

CVE-2012-10026

CVE-2012-10026CRITICAL

WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

63RIESGO

abrir ↗

Referência✓ VexDay Proof

Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection

CVE-2008-3955—webappsphp

SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute

23RIESGO

abrir ↗

Referência

CVE-2026-15046

CVE-2026-15046MEDIUM

LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF

33RIESGO

abrir ↗

Referência✓ VexDay Proof

Open Auto Classifieds 1.4.3b - SQL Injection

CVE-2008-6656—webappsphp

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL c

23RIESGO

abrir ↗

Referência✓ VexDay Proof

AJchat 0.10 - 'unse' SQL Injection

CVE-2008-7210—webappsphp

directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a

23RIESGO

abrir ↗

Referência

CVE-2009-20006

CVE-2009-20006CRITICAL

osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2009-20006

CVE-2009-20006CRITICAL

osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2009-20006

CVE-2009-20006CRITICAL

osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

63RIESGO

abrir ↗

Referência

CVE-2022-46967

CVE-2022-46967CRITICAL

An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admi

48RIESGO

abrir ↗

Referência✓ VexDay Proof

my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1812—webappsphp

Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL comm

23RIESGO

abrir ↗

Referência✓ VexDay Proof

Submitter Script - Authentication Bypass

CVE-2009-1813—webappsphp

Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitr

23RIESGO

abrir ↗

Referência

CVE-2010-1529

CVE-2010-1529—

SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta

23RIESGO

abrir ↗

Referência

CVE-2010-1529

CVE-2010-1529—

SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta

23RIESGO

abrir ↗

Referência

CVE-2010-3396

CVE-2010-3396—

Buffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users to execute arbitrary co

23RIESGO

abrir ↗

Referência

CVE-2016-10031

CVE-2016-10031—

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYS

23RIESGO

abrir ↗

Referência

CVE-2010-4864

CVE-2010-4864—

SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execu

23RIESGO

abrir ↗

Referência

CVE-2016-10033

CVE-2016-10033CRITICALbajo ataque

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

100RIESGO

abrir ↗

Referência

CVE-2026-14187

CVE-2026-14187LOW

Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR

28RIESGO

abrir ↗

Referência

CVE-2017-12969

CVE-2017-12969—

Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows r

28RIESGO

abrir ↗

Referência

CVE-2026-14861

CVE-2026-14861HIGH

User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR

41RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.