Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
26.240 exploits
Referência
CVE-2014-3247
Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web scr
23RIESGO
abrir ↗
Referência
CVE-2014-3978
SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2014-4113
CVE-2014-4113HIGHbajo ataque
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RIESGO
abrir ↗
Referência
CVE-2021-45783
Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to
23RIESGO
abrir ↗
Referência
CVE-2026-5611
Belkin F9K1015 formCrossBandSwitch stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5610
Belkin F9K1015 formWISP5G stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5609
Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5608
Belkin F9K1122 formWlanSetup stack-based overflow
41RIESGO
abrir ↗
Referência
CVE-2026-5607
imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2019-25692
Kados R10 GreenBee SQL Injection via id_to_modify Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25690
Kados R10 GreenBee SQL Injection via mng_profile_id
41RIESGO
abrir ↗
Referência
CVE-2019-25688
Kados R10 GreenBee SQL Injection via menu_lev1 Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25686
Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service
41RIESGO
abrir ↗
Referência
CVE-2019-25684
OpenDocMan 1.3.4 SQL Injection via where Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25683
FileZilla 3.40.0 Denial of Service via Local Search
33RIESGO
abrir ↗
Referência
CVE-2019-25682
CMSsite 1.0 Cross-Site Request Forgery via users.php
33RIESGO
abrir ↗
Referência
CVE-2019-25681
Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow
41RIESGO
abrir ↗
Referência
CVE-2019-25680
Advance Gift Shop Pro Script 2.0.3 SQL Injection via search
41RIESGO
abrir ↗
Referência
CVE-2019-25679
RealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH
41RIESGO
abrir ↗
Referência
CVE-2019-25678
C4G BLIS 3.4 SQL Injection via users_select.php
41RIESGO
abrir ↗
Referência
CVE-2019-25677
WinRAR 5.61 Denial of Service via Malformed Language File
33RIESGO
abrir ↗
Referência
CVE-2019-25674
CMSsite 1.0 SQL Injection via post Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25673
UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload
41RIESGO
abrir ↗
Referência
CVE-2019-25672
PilusCart 1.4.1 SQL Injection via send Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25671
VA MAX 8.3.4 Remote Code Execution via changeip.php
41RIESGO
abrir ↗
Referência
CVE-2019-25669
qdPM 9.1 SQL Injection via search_by_extrafields Parameter
41RIESGO
abrir ↗
Referência
CVE-2019-25668
News Website Script 2.0.5 SQL Injection via index.php
41RIESGO
abrir ↗
Referência
CVE-2019-25667
TaskInfo 8.2.0.280 Denial of Service Buffer Overflow
33RIESGO
abrir ↗
Referência
CVE-2019-25666
SpotAuditor 3.6.7 Denial of Service Buffer Overflow
33RIESGO
abrir ↗
Referência
CVE-2019-25665
River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS
33RIESGO
abrir ↗
← anteriorpágina 340 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.