Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.496exploits catalogados
34.964CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8510Nuclei 4239Metasploit 3468✓ solo verificadosrecientespopularesriesgo
21.797 exploits
Referência
CVE-2017-6371
CVE-2017-6371—
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string
23RIESGO
abrir ↗
Referência
CVE-2017-6371
CVE-2017-6371—
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string
23RIESGO
abrir ↗
Referência
CVE-2026-12965
CVE-2026-12965CRITICAL
Super Store Finder <= 7.8 - Unauthenticated SQL Injection via ssf_tracking
48RIESGO
abrir ↗
Referência
CVE-2014-4166
CVE-2014-4166—
Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject a
23RIESGO
abrir ↗
Referência
CVE-2014-4166
CVE-2014-4166—
Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject a
23RIESGO
abrir ↗
Referência
CVE-2015-8356
CVE-2015-8356—
Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated u
23RIESGO
abrir ↗
Referência
CVE-2023-0963
CVE-2023-0963HIGH
SourceCodester Music Gallery Site POST Request Users.php access control
41RIESGO
abrir ↗
Referência
CVE-2011-0887
CVE-2011-0887—
The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses pred
23RIESGO
abrir ↗
Referência
CVE-2014-1843
CVE-2014-1843—
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attacke
38RIESGO
abrir ↗
Referência✓ VexDay Proof
Morovia Barcode ActiveX Professional 3.3.1304 - Arbitrary File Overwrite
CVE-2007-2644—remotewindows
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrar
23RIESGO
abrir ↗
Referência
CVE-2017-6999
CVE-2017-6999—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RIESGO
abrir ↗
Referência
CVE-2017-6997
CVE-2017-6997—
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO
23RIESGO
abrir ↗
Referência
CVE-2026-12872
CVE-2026-12872—
Webinfos <= 1.2 - Unauthenticated Arbitrary File Upload
23RIESGO
abrir ↗
Referência
CVE-2025-15673
CVE-2025-15673MEDIUM
Import and export users and customers < 2.4.3 - Admin+ Arbitrary File Read
33RIESGO
abrir ↗
Referência
CVE-2025-15672
CVE-2025-15672HIGH
Chama < 1.0.13 - Unauthenticated PHP Object Injection
41RIESGO
abrir ↗
Referência
CVE-2026-16534
CVE-2026-16534CRITICAL
Import and export users and customers < 2.4.2 - Custom Role Privilege Escalation to Administrator via CSV Import
48RIESGO
abrir ↗
Referência
CVE-2026-16532
CVE-2026-16532CRITICAL
Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form
48RIESGO
abrir ↗
Referência
CVE-2011-0962
CVE-2011-0962—
Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Dev
23RIESGO
abrir ↗
Referência
CVE-2026-18583
CVE-2026-18583MEDIUM
mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
33RIESGO
abrir ↗
Referência
CVE-2026-18582
CVE-2026-18582MEDIUM
mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
33RIESGO
abrir ↗
Referência
CVE-2026-18581
CVE-2026-18581MEDIUM
ggml-org llama.cpp Jinja Minja Template parser.cpp assertion
33RIESGO
abrir ↗
Referência
CVE-2016-7400
CVE-2016-7400—
Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência
CVE-2018-15768
CVE-2018-15768—
Insecure MySQL Configuration Vulnerability
23RIESGO
abrir ↗
Referência
CVE-2012-5684
CVE-2012-5684—
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Referência
CVE-2012-5684
CVE-2012-5684—
Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc
23RIESGO
abrir ↗
Referência
CVE-2013-6923
CVE-2013-6923—
Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331
23RIESGO
abrir ↗
Referência
CVE-2013-6923
CVE-2013-6923—
Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331
23RIESGO
abrir ↗
Referência
CVE-2015-8356
CVE-2015-8356—
Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated u
23RIESGO
abrir ↗
Referência
CVE-2012-3236
CVE-2012-3236—
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
28RIESGO
abrir ↗
Referência
CVE-2013-1616
CVE-2013-1616—
The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbit
28RIESGO
abrir ↗
← anteriorpágina 318 / 727siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.