Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados

39.383CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9651Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

24.997 exploits

Referência✓ VexDay Proof

TurboFTP Server 5.30 Build 572 - 'newline/LIST' Multiple Remote Denial of Service Vulnerabilities

CVE-2007-1080—doswindows

Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (1

23RIESGO

abrir ↗

Referência

CVE-2010-0610

CVE-2010-0610—

Multiple SQL injection vulnerabilities in the Photoblog (com_photoblog) component for Joomla! allow remote attackers to

23RIESGO

abrir ↗

Referência

CVE-2010-4770

CVE-2010-4770—

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit

23RIESGO

abrir ↗

Referência

CVE-2026-7740

CVE-2026-7740MEDIUM

justdan96 tsMuxer vvc.cpp setFPS denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-7739

CVE-2026-7739MEDIUM

justdan96 tsMuxer hevc.cpp setFPS denial of service

33RIESGO

abrir ↗

Referência

CVE-2026-7738

CVE-2026-7738MEDIUM

puchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversal

33RIESGO

abrir ↗

Referência

CVE-2010-0630

CVE-2010-0630—

SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência

CVE-2023-22809

CVE-2023-22809HIGH

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RIESGO

abrir ↗

Referência

CVE-2010-0630

CVE-2010-0630—

SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitrar

23RIESGO

abrir ↗

Referência

CVE-2010-4783

CVE-2010-4783—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when ma

23RIESGO

abrir ↗

Referência

CVE-2010-0678

CVE-2010-0678—

PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlie

23RIESGO

abrir ↗

Referência

CVE-2010-4791

CVE-2010-4791—

SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user

23RIESGO

abrir ↗

Referência

CVE-2010-4792

CVE-2010-4792—

Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrar

23RIESGO

abrir ↗

Referência

CVE-2025-32433

CVE-2025-32433CRITICALbajo ataque

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RIESGO

abrir ↗

Referência

CVE-2010-4794

CVE-2010-4794—

Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and

23RIESGO

abrir ↗

Referência

CVE-2026-7732

CVE-2026-7732MEDIUM

code-projects BloodBank Managing System request_blood.php unrestricted upload

33RIESGO

abrir ↗

Referência

CVE-2026-19897

CVE-2026-19897MEDIUM

mangroup dtale Login Endpoint auth.py login excessive authentication

33RIESGO

abrir ↗

Referência

CVE-2023-0777

CVE-2023-0777HIGH

Authentication Bypass by Primary Weakness in modoboa/modoboa

61RIESGO

abrir ↗

Referência

CVE-2026-19896

CVE-2026-19896MEDIUM

mangroup dtale Flask Session Cookie app.py build_secret_key random values

33RIESGO

abrir ↗

Referência

CVE-2010-4797

CVE-2010-4797—

Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute a

23RIESGO

abrir ↗

Referência

CVE-2010-4798

CVE-2010-4798—

Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbit

23RIESGO

abrir ↗

Referência

CVE-2026-18216

CVE-2026-18216MEDIUM

Backup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-Login

33RIESGO

abrir ↗

Referência

CVE-2026-16007

CVE-2026-16007HIGH

Authenticated SQL Injection in AppFlowy

41RIESGO

abrir ↗

Referência

CVE-2019-18818

CVE-2019-18818—

strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s

60RIESGO

abrir ↗

Referência

CVE-2025-61884

CVE-2025-61884HIGHbajo ataqueransomware

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions

100RIESGO

abrir ↗

Referência✓ VexDay Proof

AJ Classifieds 1.0 - 'postingdetails.php' SQL Injection

CVE-2007-1296—webappsphp

SQL injection vulnerability in postingdetails.php in AJ Classifieds 1.0 allows remote attackers to execute arbitrary SQL

23RIESGO

abrir ↗

Referência✓ VexDay Proof

k-links directory - SQL Injection / Cross-Site Scripting

CVE-2008-3580—webappsphp

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1)

23RIESGO

abrir ↗

Referência

CVE-2010-4829

CVE-2010-4829—

SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers

23RIESGO

abrir ↗

Referência

CVE-2010-4838

CVE-2010-4838—

SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users

23RIESGO

abrir ↗

Referência★ 47

Unauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled

CVE-2024-56145CRITICALbajo ataque

RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.