Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.989exploits catalogados
40.450CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.042VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2017-8422
CVE-2017-8422—
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and le
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB Garage 1.2.0 Beta3 - SQL Injection
CVE-2007-6223—webappsphp
SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Riddles Complete Website 1.2.1 - 'riddleid' SQL Injection
CVE-2008-5166—webappsphp
SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PG Job Site - Blind SQL Injection
CVE-2008-6117—webappsphp
SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência✓ VexDay Proof
phpBB 3 - Mod Tag Board 4 Blind SQL Injection
CVE-2008-6314—webappsphp
SQL injection vulnerability in tag_board.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers t
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WEBBDOMAIN Post Card 1.02 - Authentication Bypass
CVE-2008-6623—webappsphp
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote atta
23RIESGO
abrir ↗
Referência
CVE-2010-0608
CVE-2010-0608—
SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2010-0608
CVE-2010-0608—
SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands vi
23RIESGO
abrir ↗
Referência
CVE-2010-2047
CVE-2010-2047—
SQL injection vulnerability in index.php in JE CMS 1.0.0 and 1.1 allows remote attackers to execute arbitrary SQL comman
23RIESGO
abrir ↗
Referência
CVE-2010-2683
CVE-2010-2683—
SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2010-2683
CVE-2010-2683—
SQL injection vulnerability in result.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2010-4919
CVE-2010-4919—
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbit
23RIESGO
abrir ↗
Referência
CVE-2016-1807
CVE-2016-1807—
Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watch
23RIESGO
abrir ↗
Referência
CVE-2026-44711
CVE-2026-44711HIGH
pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption
41RIESGO
abrir ↗
Referência
CVE-2016-1863
CVE-2016-1863—
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local user
23RIESGO
abrir ↗
Referência
CVE-2026-56099
CVE-2026-56099MEDIUM
OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input
33RIESGO
abrir ↗
Referência
CVE-2026-38945
CVE-2026-38945HIGH
Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary cod
41RIESGO
abrir ↗
Referência
CVE-2018-25323
CVE-2018-25323HIGH
Allok AVI DivX MPEG to DVD Converter 2.6.1217 Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2026-7862
CVE-2026-7862HIGH
Eupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Initiation
41RIESGO
abrir ↗
Referência✓ VexDay Proof
CityWriter 0.9.7 - 'head.php' Remote File Inclusion
CVE-2007-6324—webappsphp
PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP
23RIESGO
abrir ↗
Referência
CVE-2010-4963
CVE-2010-4963—
SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL command
23RIESGO
abrir ↗
Referência
CVE-2026-1402
CVE-2026-1402MEDIUM
Allocation of Resources Without Limits or Throttling in GitLab
33RIESGO
abrir ↗
Referência
CVE-2010-3148
CVE-2010-3148—
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse
28RIESGO
abrir ↗
Referência
CVE-2017-8644
CVE-2017-8644—
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose in
28RIESGO
abrir ↗
Referência
CVE-2026-50656
CVE-2026-50656HIGH
Microsoft Defender Elevation of Privilege Vulnerability
46RIESGO
abrir ↗
Referência
CVE-2026-9570
CVE-2026-9570HIGH
Taskbuilder < 5.0.8 - Reflected XSS via Shortcode
41RIESGO
abrir ↗
Referência✓ VexDay Proof
EZContents 1.4.5 - 'index.php?link' Remote File Disclosure
CVE-2007-6368—webappsphp
Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a
23RIESGO
abrir ↗
Referência
CVE-2026-7785
CVE-2026-7785MEDIUM
A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7784
CVE-2026-7784MEDIUM
RTGS2017 NagaAgent Skills Endpoint extensions.py path traversal
33RIESGO
abrir ↗
Referência
CVE-2026-94267
CVE-2026-94267CRITICAL
Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action
48RIESGO
abrir ↗
← anteriorpágina 326 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.