Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.991exploits catalogados
40.452CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4561Metasploit 3537✓ solo verificadosrecientespopularesriesgo
26.240 exploits
Referência
CVE-2017-0144
CVE-2017-0144HIGHbajo ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗
Referência
CVE-2026-85407
CVE-2026-85407MEDIUM
Eleveo Quality Management Conversation events denial of service
33RIESGO
abrir ↗
Referência
CVE-2026-8033
CVE-2026-8033MEDIUM
PicoTronica e-Clinic Healthcare System ECHS Response Header v2 information disclosure
33RIESGO
abrir ↗
Referência
CVE-2026-8032
CVE-2026-8032MEDIUM
PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials
33RIESGO
abrir ↗
Referência
CVE-2026-85406
CVE-2026-85406MEDIUM
Eleveo Quality Management Conversation Review cross site scripting
33RIESGO
abrir ↗
Referência
CVE-2018-5989
CVE-2018-5989—
SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber actio
23RIESGO
abrir ↗
Referência
CVE-2026-7468
CVE-2026-7468MEDIUM
1024-lab smart-admin Demo Site index.html access control
33RIESGO
abrir ↗
Referência
CVE-2026-6537
CVE-2026-6537MEDIUM
Stack-based Buffer Overflow in Wireshark
33RIESGO
abrir ↗
Referência
CVE-2026-6536
CVE-2026-6536MEDIUM
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
33RIESGO
abrir ↗
Referência✓ VexDay Proof
newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection
CVE-2008-2341—webappsphp
PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2018-5990
CVE-2018-5990—
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
MeltingIce File System 1.0 - Arbitrary Add User
CVE-2008-2348—webappsphp
MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and e
23RIESGO
abrir ↗
Referência
Joomla! Component SquadManagement 1.0.3 - SQL Injection
CVE-2018-7179—webappsphp
SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter.
23RIESGO
abrir ↗
Referência✓ VexDay Proof
WR-Meeting 1.0 - 'msnum' Local File Disclosure
CVE-2008-2355—webappsphp
Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is disabled, allows remote attac
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Group Communication Center (WGCC) 1.0.3 - SQL Injection
CVE-2008-2446—webappsphp
Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow rem
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component xsstream-dm 0.01b - SQL Injection
CVE-2008-2454—webappsphp
SQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla! allows remote attackers
23RIESGO
abrir ↗
Referência✓ VexDay Proof
LibSPF2 < 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
CVE-2008-2469—dosmultiple
Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remo
28RIESGO
abrir ↗
Referência
CVE-2012-6493
CVE-2012-6493—
Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers
23RIESGO
abrir ↗
Referência
CVE-2012-6524
CVE-2012-6524—
SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via t
23RIESGO
abrir ↗
Referência
CVE-2015-1478
CVE-2015-1478—
Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attac
23RIESGO
abrir ↗
Referência
CVE-2016-0169
CVE-2016-0169—
GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012
35RIESGO
abrir ↗
Referência
CVE-2023-41425
CVE-2023-41425MEDIUM
Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code
60RIESGO
abrir ↗
Referência✓ VexDay Proof
gf-3xplorer 2.4 - Cross-Site Scripting / Local File Inclusion
CVE-2007-6475—webappsphp
Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary
23RIESGO
abrir ↗
Referência
CVE-2014-4019
CVE-2014-4019—
ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient
28RIESGO
abrir ↗
Referência
CVE-2015-8423
CVE-2015-8423—
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and
35RIESGO
abrir ↗
Referência✓ VexDay Proof
Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting
CVE-2008-2533—webappsphp
Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting
CVE-2008-2535—webappsphp
Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbi
23RIESGO
abrir ↗
Referência
CVE-2012-6560
CVE-2012-6560—
SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands v
23RIESGO
abrir ↗
Referência
CVE-2012-6587
CVE-2012-6587—
Cross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation Rental Software allows
23RIESGO
abrir ↗
Referência
CVE-2012-6589
CVE-2012-6589—
Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbi
23RIESGO
abrir ↗
← anteriorpágina 341 / 875siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.